WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
edoc-easy-tables
Published
2025-01-07
Title
eDoc Easy Tables <= 1.29 - Authenticated (Contributor+) SQL Injection
Slug
edoc-employee-application
Published
2023-11-23
Title
eDoc Employee Job Application <= 1.13 - Reflected Cross-Site Scripting
Slug
eds-responsive-menu
Published
2025-06-19
Title
eDS Responsive Menu <= 1.2 - Missing Authorization
Slug
eds-responsive-menu
Published
2025-09-05
Title
eDS Responsive Menu <= 1.2 - Authenticated (Administrator+) PHP Object Injection
Slug
eds-responsive-menu
Published
2026-01-27
Title
eDS Responsive Menu <= 1.2 - Reflected Cross-Site Scripting
Slug
eduadmin-booking
Published
2024-12-11
Title
EduAdmin Booking < 5.3.0 - Authenticated (Contributor+) Local File Inclusion
Slug
edubin
Published
2024-07-29
Title
Edubin <= 9.2.0 - Unauthenticated Server-Side Request Forgery
Slug
edublink-core
Published
2026-01-06
Title
EduBlink Core <= 2.0.7 - Authenticated (Contributor+) Local File Inclusion
Slug
educare
Published
2023-02-21
Title
Educare - Students & Result Management System < 1.4.4 - Cross-Site Request Forgery (CSRF)
Slug
educare
Published
2023-09-09
Title
Educare < 1.4.7 - Missing Authorization to Sensitive Information Exposure
Slug
educare
Published
2026-01-28
Title
Educare < 1.6.2 - Unauthenticated Stored Cross-Site Scripting
Slug
education-addon
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
education-addon
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
education-addon
Published
2025-02-18
Title
Education Addon for Elementor <= 1.3.1 - Authenticated (Contributor+) Insecure Direct Object Reference via naedu_elementor_template Shortcode
Slug
edukart-pro
Published
2025-11-24
Title
EduKart Pro <= 1.0.3 - Unauthenticated Privilege Escalation
Slug
edunext-openedx-integrator
Published
2024-11-18
Title
Open edX LMS <= 2.6.1 - Reflected Cross-Site Scripting
Slug
edwiser-bridge
Published
2021-04-16
Title
Edwiser Bridge < 2.0.7 - CSRF Nonce Bypass
Slug
edwiser-bridge
Published
2021-06-28
Title
Edwiser Bridge < 2.0.7 - Cross-Site Request Forgery
Slug
edwiser-bridge
Published
2024-04-05
Title
Edwiser Bridge < 3.0.4 - Authenticated (Administrator+) SQL Injection
Slug
edwiser-bridge
Published
2024-05-06
Title
Edwiser Bridge < 3.0.6 - Authentication Bypass due to Missing Empty Value Check
Slug
edwiser-bridge
Published
2024-10-15
Title
Edwiser Bridge < 3.0.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
edwiser-bridge
Published
2024-10-15
Title
Edwiser Bridge < 3.0.8 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
edwiser-bridge
Published
2024-12-25
Title
Edwiser Bridge – WordPress Moodle LMS Integration < 3.1.0 - Reflected Cross-Site Scripting
Slug
edwiser-bridge
Published
2026-01-21
Title
Edwiser Bridge < 4.3.3 - Missing Authorization
Slug
eelv-newsletter
Published
2014-08-01
Title
EELV Newsletter 3.4.3 - lettreinfo.php Unspecified XSS