WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ecab-taxi-booking-manager
Published
2025-08-25
Title
Taxi Booking Manager for WooCommerce < 1.3.1 - Missing Authorization
Slug
ecab-taxi-booking-manager
Published
2026-05-26
Title
E-cab Taxi Booking Manager for Woocommerce < 2.0.2 - Missing Authorization
Slug
ecab-taxi-booking-manager
Published
2026-08-10
Title
E-cab Taxi Booking Manager for Woocommerce < 2.0.5 - Missing Authorization
Slug
ecab-taxi-booking-manager
Published
2026-08-19
Title
E-cab Taxi Booking Manager for Woocommerce < 2.0.8 - Missing Authorization
Slug
ecab-taxi-booking-manager
Published
2026-09-19
Title
E-cab Taxi Booking Manager for Woocommerce < 2.0.8 - Missing Authorization
Slug
ecab-taxi-booking-manager
Published
2026-09-02
Title
E-cab Taxi Booking Manager for Woocommerce < 2.0.5 - Unauthenticated Price Manipulation via mptbm_add_to_cart
Slug
ecab-taxi-booking-manager
Published
2026-10-05
Title
E-cab Taxi Booking Manager for Woocommerce < 2.1.2 - Missing Authroization
Slug
ecab-taxi-booking-manager
Published
2026-10-29
Title
E-cab Taxi Booking Manager for Woocommerce < 2.1.7 - Missing Authorization
Slug
ecava-diot-scada
Published
2025-06-13
Title
DIOT SCADA with MQTT <= 1.0.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
echbay-admin-security
Published
2025-11-20
Title
EchBay Admin Security < 1.3.1 - Reflected Cross-Site Scripting
Slug
echo-knowledge-base
Published
2024-02-02
Title
Knowledge Base for Documentation, FAQs with AI Assistance < 11.31.0 - Unauthenticated PHP Object Injection in is_article_recently_viewed
Slug
echo-knowledge-base
Published
2026-01-29
Title
Echo Knowledge Base – Documentation, FAQs, AI Chat & AI Search < 16.20.0 - Missing Authorization
Slug
echo-knowledge-base
Published
2026-08-13
Title
Knowledge Base for Documentation, FAQs with AI Assistance < 17.212.0 - Unauthenticated Stored Cross-Site Scripting
Slug
echo-knowledge-base
Published
2026-10-27
Title
Echo Knowledge Base < 17.311.0 - Reflected Cross-Site Scripting via 'new_kb_config' Parameter
Slug
echosign
Published
2016-04-21
Title
Echosign <= 1.1 - Reflected Cross-Site Scripting (XSS)
Slug
echoza
Published
2024-12-06
Title
Echoza <= 0.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
ecommerce-addon
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ecommerce-addon
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ecommerce-product-carousel-slider-for-elementor
Published
2025-09-05
Title
Product Carousel Slider for Elementor <= 2.1.3 - Missing Authorization
Slug
ecommerce-product-catalog
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
ecommerce-product-catalog
Published
2021-02-17
Title
eCommerce Product Catalog < 3.0.18 - CSRF Nonce Bypass
Slug
ecommerce-product-catalog
Published
2021-10-25
Title
eCommerce Product Catalog for WordPress < 3.0.39 - Reflected Cross-Site Scripting
Slug
ecommerce-product-catalog
Published
2022-10-10
Title
eCommerce Product Catalog Plugin for WordPress < 3.0.71 - Reflected XSS
Slug
ecommerce-product-catalog
Published
2022-10-17
Title
eCommerce Product Catalog Plugin for WordPress < 3.0.72 - Reflected XSS via AJAX
Slug
ecommerce-product-catalog
Published
2022-10-17
Title
eCommerce Product Catalog Plugin for WordPress < 3.0.72 - Reflected XSS