WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
eg-series
Published
2025-05-14
Title
EG-Series <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
ehive-account-details
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
ehive-object-details
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
ehive-objects-image-grid
Published
2025-01-30
Title
eHive Objects Image Grid < 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ehive-search
Published
2026-01-06
Title
eHive Search < 2.5.1 - Reflected Cross-Site Scripting
Slug
eid-easy-qualified-electonic-signature
Published
2024-06-25
Title
Various Plugins <= Various Version - Use of Polyfill.io
Slug
eight-day-week-print-workflow
Published
2025-12-21
Title
Eight Day Week Print Workflow < 1.2.6 - Authenticated (Custom+) Information Exposure
Slug
einvoiceapp-malaysia
Published
2025-12-21
Title
E-Invoice App Malaysia <= 1.3.0 - Unauthenticated Information Exposure
Slug
ekc-tournament-manager
Published
2024-10-21
Title
EKC Tournament Manager < 2.2.2 - Cross-Site Request Forgery to Arbitrary File Upload
Slug
ekc-tournament-manager
Published
2024-09-10
Title
EKC Tournament Manager < 2.2.2 - Admin+ Arbitrary File Download
Slug
ekc-tournament-manager
Published
2024-09-10
Title
EKC Tournament Manager < 2.2.2 - Delete Tournaments via CSRF
Slug
ekc-tournament-manager
Published
2024-09-10
Title
EKC Tournament Manager < 2.2.2 - Create Tournaments/Teams via CSRF
Slug
ekiline-block-collection
Published
2024-11-08
Title
Ekiline Block Collection < 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elastic-email-sender
Published
2023-07-20
Title
Elastic Email Sender < 1.2.7 - Admin+ Stored XSS
Slug
elastic-email-sender
Published
2025-10-28
Title
Elastic Email Sender < 1.2.21 - Missing Authorization
Slug
elastic-email-subscribe-form
Published
2025-06-05
Title
Elastic Email Subscribe Form <= 1.2.2 - Missing Authorization
Slug
elastic-theme-editor
Published
2025-11-10
Title
Elastic Theme Editor <= 0.0.3 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
elasticpress
Published
2021-03-01
Title
ElasticPress < 3.5.4 - Cross-Site Request Forgery
Slug
elasticpress
Published
2024-06-06
Title
ElasticPress < 5.1.2 - Data Sync via CSRF
Slug
elastik-page-builder
Published
2024-09-30
Title
Elastik Page Builder <= 0.27.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
ele-blog
Published
2024-04-30
Title
Eleblog – Elementor Blog And Magazine Addons <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ele-blog
Published
2024-12-03
Title
Eleblog – Elementor Blog And Magazine Addons <= 1.8 - Missing Authorization to Authenticated (Subscriber+) Deactivation Submission
Slug
ele-blog
Published
2026-02-05
Title
Eleblog – Elementor Blog And Magazine Addons <= 2.0.3 - Unauthenticated Local File Inclusion
Slug
ele-conditions
Published
2025-09-05
Title
Elementor Element Condition <= 1.0.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
electio-core
Published
2026-01-28
Title
Electio Core <= 1.4 - Unauthenticated SQL Injection