WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-media-gallery
Published
2015-09-05
Title
Easy Media Gallery < 1.3.50 - Cross Site Scripting (XSS)
Slug
easy-media-gallery
Published
2025-03-31
Title
Gallery – Photo Albums Plugin <= 1.3.170 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-media-gallery-pro
Published
2014-09-17
Title
Easy Media Gallery < 1.3.0 - CSRF & Cross-Site Scripting (XSS)
Slug
easy-media-replace
Published
2023-03-28
Title
Easy Media Replace < 0.2.0 - Author+ File Deletion
Slug
easy-menu-manager-wpzest
Published
2024-10-17
Title
Easy Menu Manager | WPZest <= 1.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
easy-mls-listings-import
Published
2025-02-17
Title
Easy MLS Listings Import < 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-modal
Published
2017-08-07
Title
Easy Modal < 2.1.0 - Authenticated SQL Injection
Slug
easy-modal
Published
2026-01-11
Title
Easy Modal <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-newsletter-signups
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-newsletter-signups
Published
2023-11-13
Title
Easy Newsletter Signups <= 1.0.4 - Admin+ SQLi
Slug
easy-newsletter-signups
Published
2023-09-01
Title
Easy Newsletter Signups <= 1.0.4 - Missing Authorization
Slug
easy-notify-lite
Published
2024-05-14
Title
Popup Builder < 1.1.30 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
easy-notify-lite
Published
2024-05-27
Title
Easy Notify Lite < 1.1.33 - Contributor+ Stored XSS
Slug
easy-notify-lite
Published
2025-02-22
Title
Popup Builder < 1.1.35 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-notify-lite
Published
2025-04-22
Title
Popup Builder < 1.1.37 - Authenticated (Subscriber+) Local File Inclusion
Slug
easy-notify-lite
Published
2025-12-12
Title
Popup Builder < 1.1.39 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Reset
Slug
easy-order-view
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-org-chart
Published
2022-09-01
Title
Easy Org Chart <= 3.1 - Contributor+ Stored Cross-Site Scripting
Slug
easy-page-transition
Published
2025-03-24
Title
Easy Page Transition <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
easy-panorama
Published
2023-02-15
Title
Easy Panorama < 1.1.5 - Admin+ Stored XSS
Slug
easy-paypal-donation
Published
2021-10-04
Title
Paypal Donation < 1.3.1 - CSRF to Arbitrary Post Deletion
Slug
easy-paypal-donation
Published
2021-10-18
Title
Paypal Donation < 1.3.2 - Admin+ Stored Cross-Site Scripting
Slug
easy-paypal-donation
Published
2021-10-04
Title
Paypal Donation < 1.3.1 - CSRF to Stored Cross-Site Scripting
Slug
easy-paypal-donation
Published
2021-10-11
Title
Multiple Plugins from WPPlugin - Reflected Cross-Site Scripting via page Parameter
Slug
easy-paypal-donation
Published
2021-12-09
Title
Accept Donations with PayPal < 1.3.4 - Arbitrary Post Deletion via CSRF