WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-social-icons
Published
2022-03-15
Title
Easy Social Icons < 3.2.0 - Admin+ Stored Cross-Site Scripting
Slug
easy-social-icons
Published
2022-03-21
Title
Easy Social Icons < 3.2.1 - Unauthenticated Arbitrary Icon Deletion
Slug
easy-social-icons
Published
2022-03-08
Title
Easy Social Icons < 3.1.4 - Admin+ SQL Injection
Slug
easy-social-icons
Published
2022-03-21
Title
Easy Social Icons < 3.2.1 - Admin+ Stored Cross-Site Scripting in add icon
Slug
easy-social-icons
Published
2023-11-07
Title
Easy Social Icons < 3.2.5 - Missing Authorization via cnss_save_ajax_order
Slug
easy-social-icons
Published
2023-11-23
Title
Easy Social Icons < 3.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
easy-social-media
Published
2025-06-18
Title
Easy Social <= 1.3 - Reflected Cross-Site Scripting
Slug
easy-social-share-buttons
Published
2024-10-09
Title
Easy Social Share Buttons <= 1.4.5 - Reflected Cross-Site Scripting
Slug
easy-social-share-buttons-for-wordpress
Published
2016-04-21
Title
Easy Social Share Buttons < 3.5 - Cross-Site Scripting (XSS)
Slug
easy-social-share-buttons3
Published
2024-03-25
Title
Easy Social Share Buttons < 9.5 - Reflected Cross-Site Scripting
Slug
easy-social-share-buttons3
Published
2024-04-05
Title
Easy Social Share Buttons < 9.5 - Missing Authorization
Slug
easy-social-share-buttons3
Published
2024-04-05
Title
Easy Social Share Buttons < 9.5 - Authenticated (Subscriber+) Local File Inclusion
Slug
easy-social-share-buttons3
Published
2025-10-26
Title
Easy Social Share Buttons < 10.7.1 - Unauthenticated Stored Cross-Site Scripting
Slug
easy-social-sharebar
Published
2024-11-08
Title
Easy Social Sharebar <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-sticky-sidebar
Published
2023-10-25
Title
WordPress CTA < 1.5.9 - Unauthenticated AJAX Actions Call
Slug
easy-sticky-sidebar
Published
2025-06-27
Title
WordPress CTA < 1.7.1 - Cross-Site Request Forgery
Slug
easy-sticky-sidebar
Published
2025-08-01
Title
WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons < 1.7.1 - Missing Authorization to Unauthenticated Sticky Status Update
Slug
easy-stripe
Published
2025-07-03
Title
Easy Stripe < 1.2 - Unauthenticated Arbitrary Function Call
Slug
easy-student-results
Published
2022-07-19
Title
Easy Student Results <= 2.2.8 - Reflected Cross-Site Scripting
Slug
easy-student-results
Published
2022-07-19
Title
Easy Student Results <= 2.2.8 - Sensitive Information Disclosure via REST API
Slug
easy-svg
Published
2022-06-01
Title
Easy SVG Support < 3.3.0 - Author+ Stored Cross Site Scripting via SVG
Slug
easy-svg
Published
2024-11-07
Title
Easy SVG Support < 3.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
easy-svg
Published
2026-02-18
Title
Easy SVG Support < 4.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
easy-svg-image-allow
Published
2024-01-03
Title
Easy SVG Allow <= 1.0 - Author+ Stored XSS via SVG
Slug
easy-svg-upload
Published
2024-10-30
Title
Easy SVG Upload <= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload