WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-stripe
Published
2025-07-03
Title
Easy Stripe < 1.2 - Unauthenticated Arbitrary Function Call
Slug
easy-student-results
Published
2022-07-19
Title
Easy Student Results <= 2.2.8 - Reflected Cross-Site Scripting
Slug
easy-student-results
Published
2022-07-19
Title
Easy Student Results <= 2.2.8 - Sensitive Information Disclosure via REST API
Slug
easy-svg
Published
2022-06-01
Title
Easy SVG Support < 3.3.0 - Author+ Stored Cross Site Scripting via SVG
Slug
easy-svg
Published
2024-11-07
Title
Easy SVG Support < 3.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
easy-svg
Published
2026-02-18
Title
Easy SVG Support < 4.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
easy-svg-image-allow
Published
2024-01-03
Title
Easy SVG Allow <= 1.0 - Author+ Stored XSS via SVG
Slug
easy-svg-upload
Published
2024-10-30
Title
Easy SVG Upload <= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
easy-table
Published
2015-08-10
Title
Easy Table < 1.5.3 - Stored Cross-Site Scripting via CSRF
Slug
easy-table
Published
2017-02-14
Title
Easy Table < 1.7 - Admin+ Stored Cross-Site Scripting
Slug
easy-table-booking
Published
2024-04-29
Title
Easy Restaurant Table Booking <= 1.0.0 - Cross-Site Request Forgery
Slug
easy-table-of-contents
Published
2024-06-05
Title
Easy Table of Contents < 2.0.66 - Admin+ Stored XSS
Slug
easy-table-of-contents
Published
2024-06-18
Title
Easy Table of Contents < 2.0.67 - Editor+ Stored XSS
Slug
easy-table-of-contents
Published
2024-07-16
Title
easy-table-of-contents < 2.0.68 - Editor+ Stored XSS
Slug
easy-table-of-contents
Published
2026-02-18
Title
Easy Table of Contents < 2.0.79 - Contributor+ Stored XSS
Slug
easy-table-of-contents
Published
2026-02-11
Title
Easy Table of Contents < 2.0.81 - Cross-Site Request Forgery
Slug
easy-taxonomy-images
Published
2025-06-18
Title
Easy Taxonomy Images <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting
Slug
easy-team-manager
Published
2017-05-31
Title
Easy Team Manager 1.3.2 - Authenticated Blind SQL Injection
Slug
easy-testimonial-manager
Published
2021-07-23
Title
Easy Testimonial Manager <= 1.2.0 - Authenticated SQL Injection
Slug
easy-testimonial-rotator
Published
2023-03-02
Title
Easy Testimonial Slider and Form < 1.0.16 - Reflected Cross-Site Scripting
Slug
easy-testimonial-rotator
Published
2023-10-12
Title
Easy Testimonial Slider and Form < 1.0.19 - Admin+ Stored XSS
Slug
easy-testimonial-rotator
Published
2025-10-28
Title
Easy Testimonial Slider and Form < 1.0.3 - Authenticated (Admin+) SQL injection
Slug
easy-testimonials
Published
2016-07-31
Title
Easy Testimonials < 1.37 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
easy-testimonials
Published
2020-05-13
Title
Easy Testimonials < 3.6 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
easy-testimonials
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)