WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-paypal-events-tickets
Published
2025-05-07
Title
Easy PayPal Events < 1.3 - Cross-Site Request Forgery
Slug
easy-paypal-shopping-cart
Published
2023-11-16
Title
Easy PayPal Shopping Cart < 1.1.11 - Contributor+ Stored XSS
Slug
easy-pdf-restaurant-menu-upload
Published
2019-06-18
Title
Easy Pdf Restaurant Menu Upload < 1.2 - XSS
Slug
easy-pdf-restaurant-menu-upload
Published
2025-07-03
Title
Easy restaurant menu manager < 2.0.2 - Authenticated (Contributot+) Stored Cross-Site Scripting via `nsc_eprm_menu_link` Shortcode
Slug
easy-pdf-restaurant-menu-upload
Published
2025-08-12
Title
Easy restaurant menu manager < 2.0.3 - Cross-Site Request Forgery to Menu Upload
Slug
easy-photo-album
Published
2014-08-01
Title
Easy Photo Album <= 1.1.5 - Album Information Disclosure
Slug
easy-pie-coming-soon
Published
2015-08-10
Title
EZP Coming Soon Page < 1.0.1 - Authenticated Cross-Site Scripting (XSS)
Slug
easy-pie-coming-soon
Published
2023-02-02
Title
EZP Coming Soon Page < 1.0.7.4 - Admin+ Stored XSS
Slug
easy-pie-maintenance-mode
Published
2023-04-19
Title
EZP Maintenance Mode <= 1.0.1 - Admin+ Stored XSS
Slug
easy-pixels-by-jevnet
Published
2024-07-08
Title
Easy Pixels by JEVNET <= 2.13 - Unauthenticated Stored Cross-Site Scripting
Slug
easy-plugin-stats
Published
2025-10-10
Title
Easy Plugin Stats <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-popup-lightbox-maker
Published
2024-11-13
Title
WP Popup Window Maker <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
easy-popup-show
Published
2024-03-25
Title
Easy PopUp Show <= 0.12 - Cross-Site Request Forgery
Slug
easy-popups
Published
2025-02-14
Title
Responsive Modal Builder for High Conversion – Easy Popups < 1.5.1 - Reflected Cross-Site Scripting
Slug
easy-portfolio
Published
2025-01-16
Title
Easy Portfolio <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-post-duplicator
Published
2025-04-09
Title
Easy Post Duplicator <= 1.0.1 - Reflected Cross-Site Scripting
Slug
easy-post-duplicator
Published
2025-04-09
Title
Easy Post Duplicator <= 1.0.1 - Authenticated (Subscriber+) SQL Injection
Slug
easy-post-submission
Published
2025-10-16
Title
Easy Post Submission < 2.0.0 - Unauthenticated Sensitive Information Exposure
Slug
easy-post-to-post-links
Published
2025-01-16
Title
Post-to-Post Links <= 4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
easy-post-types
Published
2014-05-28
Title
Easy Post Types < 1.4.4 - XSS
Slug
easy-post-types
Published
2024-10-17
Title
WP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) PHP Object Injection
Slug
easy-post-types
Published
2024-10-17
Title
WP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions
Slug
easy-post-types
Published
2024-10-17
Title
WP Easy Post Types <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta
Slug
easy-post-views-count
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-prayer
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius