WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-testimonials
Published
2022-06-14
Title
Easy Testimonials < 3.9 - Reflected Cross-Site Scripting
Slug
easy-testimonials
Published
2023-01-10
Title
Easy Testimonials < 3.9.3 - Contributor+ Stored XSS
Slug
easy-testimonials
Published
2020-09-16
Title
Easy Testimonials < 3.7 - Cross-Site Request Forgery
Slug
easy-testimonials
Published
2024-07-19
Title
Easy Testimonials <= 3.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
easy-textillate
Published
2024-03-25
Title
Easy Textillate < 2.02 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
easy-textillate
Published
2024-04-15
Title
Easy Textillate <= 2.02 - Authenticated(Contributor+) Stored Cross-Site Scripting
Slug
easy-theme-options
Published
2025-12-12
Title
Easy Theme Options <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Import
Slug
easy-theme-options
Published
2026-01-20
Title
Easy Theme Options <= 1.0 - Reflected Cross-Site Scripting
Slug
easy-tiktok-feed
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-tiktok-feed
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-timer
Published
2025-09-03
Title
Easy Timer < 4.2.2 - Authenticated (Editor+) Remote Code Execution via Shortcode
Slug
easy-tweet-embed
Published
2025-01-16
Title
Easy Tweet Embed <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-twitter-feeds
Published
2021-09-20
Title
Easy Twitter Feed < 1.2 - Contributor+ Stored Cross-Site Scripting
Slug
easy-twitter-feeds
Published
2024-11-21
Title
Easy Twitter Feed – Twitter feeds plugin for WP <= 1.2.6 - Authenticated (Contributor+) Post Exposure
Slug
easy-tynt
Published
2025-01-16
Title
Easy Tynt <= 0.2.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
easy-under-construction
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-under-construction
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-upload-files-during-checkout
Published
2025-11-03
Title
Easy Upload Files During Checkout < 2.9.9 - Unauthenticated Arbitrary JavaScript File Upload
Slug
easy-upload-files-during-checkout
Published
2025-12-31
Title
Easy Upload Files During Checkout < 3.0.1 - Missing Authorization
Slug
easy-video-player
Published
2022-11-22
Title
Easy Video Player < 1.2.2.3 - Contributor+ Stored XSS
Slug
easy-video-player
Published
2023-12-27
Title
Easy Video Player < 1.2.2.11 - Contributor+ Stored XSS
Slug
easy-voice-mail
Published
2026-02-13
Title
Easy Voice Mail < 1.2.6 - Unauthenticated Stored Cross-Site Scripting via 'message'
Slug
easy-watermark
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
easy-watermark
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-waveform-player
Published
2024-12-17
Title
Easy Waveform Player < 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting