WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-form
Published
2023-08-23
Title
Easy Form by AYS < 1.2.1 - Admin+ Stored XSS
Slug
easy-form
Published
2025-02-21
Title
Easy Form by AYS < 2.7.0 - Reflected Cross-Site Scripting
Slug
easy-form
Published
2025-11-28
Title
Easy Form < 2.7.9 - Missing Authorization
Slug
easy-form
Published
2026-02-09
Title
Easy Form < 2.8.0 - Missing Authorization
Slug
easy-form-builder
Published
2022-11-16
Title
Easy Form Builder < 3.4.0 - Admin+ Stored XSS
Slug
easy-form-builder
Published
2024-03-29
Title
Easy Form Builder < 3.7.5 - Authenticated (Contributor+) SQL Injection
Slug
easy-form-builder
Published
2025-01-07
Title
Easy Form Builder < 3.8.9 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
easy-form-builder
Published
2025-08-07
Title
Easy Form Builder < 3.8.16 - Unauthenticated SQL Injection
Slug
easy-form-builder
Published
2025-12-15
Title
Easy Form Builder < 3.8.21 - Missing Authorization
Slug
easy-form-builder
Published
2026-01-06
Title
Easy Form Builder < 4.0.0 - Missing Authorization
Slug
easy-form-builder
Published
2026-02-13
Title
Easy Form Builder < 3.9.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Response Data Exposure
Slug
easy-form-builder
Published
2026-05-28
Title
Easy Form Builder by WhiteStudio — Drag & Drop Form Builder < 4.0.7 - Unauthenticated SQL Injection
Slug
easy-form-builder
Published
2026-07-20
Title
Easy Form Builder by WhiteStudio < 4.0.12 - Unauthenticated Privilege Escalation to Administrator via Password Recovery REST Endpoint
Slug
easy-form-builder
Published
2026-07-21
Title
Easy Form Builder by WhiteStudio – Drag & Drop Form Builder < 4.0.13 - Unauthenticated Stored Cross-Site Scripting
Slug
easy-form-builder
Published
2026-09-16
Title
Easy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Registration Policy Bypass via Login Form Type Confusion
Slug
easy-form-builder
Published
2026-09-16
Title
Easy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Stored XSS via Form Type Confusion
Slug
easy-form-builder-by-bitware
Published
2021-03-26
Title
Easy Form Builder by Bitware <= 1.0 - Authenticated Arbitrary File Upload
Slug
easy-form-builder-by-bitware
Published
2021-03-27
Title
Easy Form Builder by Bitware <= 1.0 - Unauthorised AJAX calls
Slug
easy-gallery-slideshow
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
easy-github-gist-shortcodes
Published
2026-01-06
Title
Easy GitHub Gist Shortcodes <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
Slug
easy-google-fonts
Published
2026-09-09
Title
Easy Google Fonts <= 2.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via control_selectors Meta Field
Slug
easy-google-map
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
easy-hide-login
Published
2023-05-09
Title
Easy Hide Login < 1.0.8 - Admin+ Stored XSS
Slug
easy-hide-login
Published
2023-05-09
Title
Easy Hide Login < 1.0.9 - Arbitrary settings update via CSRF
Slug
easy-hide-login
Published
2026-09-21
Title
Easy Hide Login < 1.7 - Login Page Protection Bypass / Hidden URL Disclosure