WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
edd-tab-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
edd-tab-manager
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
edd-tab-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
edd-venmo
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
edge-gallery
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
edge-gallery
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
edit-comments
Published
2021-07-24
Title
Edit Comments <= 0.3 - Unauthenticated SQL Injection
Slug
edit-comments
Published
2021-07-24
Title
Edit Comments <= 0.3 - Reflected Cross-Site Scripting
Slug
edit-comments-xt
Published
2021-09-09
Title
Edit Comments XT <= 1.0 - Reflected Cross-Site Scripting
Slug
editable-table
Published
2021-10-25
Title
EditableTable <= 0.1.4 - Admin+ Stored Cross-Site Scripting
Slug
editionguard-for-woocommerce-ebook-sales-with-drm
Published
2024-12-18
Title
EditionGuard for WooCommerce – eBook Sales with DRM <= 3.4.2 - Cross-Site Request Forgery to Privilege Escalation
Slug
editionguard-for-woocommerce-ebook-sales-with-drm
Published
2025-01-16
Title
EditionGuard for WooCommerce – eBook Sales with DRM <= 3.4.2 - Reflected Cross-Site Scripting
Slug
editor-custom-color-palette
Published
2024-10-25
Title
Editor Custom Color Palette < 3.3.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
editor-custom-color-palette
Published
2025-09-22
Title
Editor Custom Color Palette <= 3.6.5 - Missing Authorization
Slug
editor-wysiwyg-background-color
Published
2025-04-16
Title
Editor Wysiwyg Background Color <= 1.0 - Missing Authorization
Slug
editorial-calendar
Published
2014-08-01
Title
Editorial Calendar 2.6 - Post Title XSS
Slug
editorial-calendar
Published
2014-08-01
Title
Editorial Calendar 2.6 - Permission Verification Arbitrary Calendar Post Deletion
Slug
editorial-calendar
Published
2014-08-01
Title
Editorial Calendar 2.6 - Post Query Multiple Filter SQL Injection
Slug
editorial-calendar
Published
2022-06-05
Title
Editorial Calendar < 3.8.3 - Contributor+ Stored XSS
Slug
editorial-calendar
Published
2025-12-20
Title
Editorial Calendar < 3.8.9 - Missing Authorization
Slug
editorial-calendar
Published
2026-02-15
Title
Editorial Calendar < 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
editorial-rating
Published
2026-06-29
Title
Editorial Rating < 4.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Link URL' Field
Slug
editormonkey
Published
2014-08-01
Title
EditorMonkey - (FCKeditor) Arbitrary File Upload
Slug
edoc-easy-tables
Published
2025-01-07
Title
eDoc Easy Tables <= 1.29 - Authenticated (Contributor+) SQL Injection
Slug
edoc-employee-application
Published
2023-11-23
Title
eDoc Employee Job Application <= 1.13 - Reflected Cross-Site Scripting