WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ect-product-carousel
Published
2024-12-12
Title
ECT Product Carousel <= 1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ect-social-share
Published
2024-12-12
Title
ECT Social Share <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ecwid-shopping-cart
Published
2016-08-08
Title
Ecwid Ecommerce Shopping Cart <= 4.4.3 - Unauthenticated PHP Object Injection
Slug
ecwid-shopping-cart
Published
2022-08-04
Title
Ecwid Ecommerce Shopping Cart < 6.10.24 - Settings Update via CSRF
Slug
ecwid-shopping-cart
Published
2023-01-27
Title
Ecwid Shopping Cart < 6.11.4 - Import via CSRF
Slug
ecwid-shopping-cart
Published
2023-03-17
Title
Ecwid Shopping Cart < 6.11.5 - Contributor+ Stored Cross-Site Scriping
Slug
ecwid-shopping-cart
Published
2022-07-09
Title
Ecwid Shopping Cart < 6.10.23 - Insufficient Access Control
Slug
ecwid-shopping-cart
Published
2023-11-21
Title
Ecwid Ecommerce Shopping Cart < 6.12.5 - Arbitrary Plugin Settings Change via CSRF
Slug
ecwid-shopping-cart
Published
2023-11-28
Title
Ecwid Ecommerce Shopping Cart < 6.12.5 - Cross-Site Request Forgery
Slug
ecwid-shopping-cart
Published
2023-11-07
Title
Ecwid Ecommerce Shopping Cart < 6.12.4 - Missing Authorization on multiple functions
Slug
ecwid-shopping-cart
Published
2024-03-29
Title
Ecwid Ecommerce Shopping Cart < 6.12.11 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
ecwid-shopping-cart
Published
2025-02-17
Title
Ecwid by Lightspeed Ecommerce Shopping Cart < 6.12.28 - Cross-Site Request Forgery to Send Deactivation Message
Slug
ecwid-shopping-cart
Published
2025-04-04
Title
Ecwid Shopping Cart < 7.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ecwid-shopping-cart
Published
2026-01-19
Title
Ecwid Shopping Cart < 7.0.6 - Missing Authorization
Slug
ecwid-shopping-cart
Published
2026-01-12
Title
Ecwid Shopping Cart < 7.0.7 - Missing Authorization
Slug
ecwid-shopping-cart
Published
2026-02-14
Title
Ecwid by Lightspeed Ecommerce Shopping Cart < 7.0.8 - Subscriber+ Privilege Escalation
Slug
ecwid-shopping-cart
Published
2026-08-11
Title
Ecwid by Lightspeed Ecommerce Shopping Cart < 7.0.9 - Subscriber+ Store Disconnection via 'ec_disconnect' Action
Slug
ed2k-link-selector
Published
2014-08-01
Title
ed2k-link-selector <= 1.1.7 - XSS in ZeroClipboard
Slug
edd-cashapp
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
edd-courses
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
edd-courses
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
edd-download-info
Published
2026-01-06
Title
EDD Download Info <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
edd-google-sheet-connector-pro
Published
2023-04-27
Title
Easy Digital Downloads Google Sheet Connector < 1.6.6 - Access Code Update via CSRF
Slug
edd-products-feed-pro
Published
2026-09-07
Title
EDD Product Catalog Feed by PixelYourSite < 1.0.3 - Authenticated (Subscriber+) Arbitrary Options Deletion via Missing Authorization on 'delete' Parameter
Slug
edd-recent-purchases
Published
2024-05-27
Title
Easy Digital Downloads – Recent Purchases <= 1.0.2 - Unauthenticated Remote File Inclusion