WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-affiliate-links
Published
2024-06-27
Title
Easy Affiliate Links < 3.7.4 - Missing Authorization to Authenticated (Subscriber+) Settings Reset
Slug
easy-age-verify
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-age-verify
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-age-verify
Published
2024-06-27
Title
Easy Age Verify < 1.8.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
easy-age-verify
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
easy-amazon-product-information
Published
2025-02-13
Title
Easy Amazon Product Information <= 4.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
easy-appointments
Published
2017-10-16
Title
Easy Appointments < 1.12.0 - Cross-Site Scripting (XSS)
Slug
easy-appointments
Published
2022-12-27
Title
Easy Appointments < 3.11.2 - Contributor+ Stored XSS in Shortcode
Slug
easy-appointments
Published
2023-05-05
Title
Easy Appointments < 3.11.10 - Cross-Site Request Forgery
Slug
easy-appointments
Published
2024-03-28
Title
Easy Appointments < 3.11.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-appointments
Published
2024-03-28
Title
Easy Appointments < 3.11.19 - Insufficient Authorization
Slug
easy-appointments
Published
2025-09-09
Title
Easy Appointments < 3.12.14.1 - Unauthenticated Arbitrary Shortcode Execution
Slug
easy-appointments
Published
2026-04-17
Title
Easy Appointments < 3.12.22 - Unauthenticated Sensitive Information Exposure via REST API
Slug
easy-appointments
Published
2026-04-13
Title
Easy Appointments < 3.12.22 - Missing Authorization
Slug
easy-appointments
Published
2026-07-08
Title
Easy Appointments < 3.12.28 - Contributor+ Customer Data Disclosure
Slug
easy-appointments
Published
2026-07-08
Title
Easy Appointments < 4.0.1 - Contributor+ Appointment Data Disclosure & Modification via Missing Authorization
Slug
easy-appointments
Published
2026-07-08
Title
Easy Appointments < 3.12.28 - Contributor+ Connection Deletion via Missing Authorization
Slug
easy-appointments
Published
2026-07-08
Title
Easy Appointments < 3.12.28 - Subscriber+ Customer PII Disclosure via IDOR
Slug
easy-appointments
Published
2026-07-08
Title
Easy Appointments < 3.12.28 - Subscriber+ Cross-User Appointment Data Modification via IDOR
Slug
easy-appointments
Published
2026-07-08
Title
Easy Appointments < 3.12.28 - Contributor+ Shortcode Allowlist Bypass
Slug
easy-appointments
Published
2026-07-08
Title
Easy Appointments < 3.12.28 - Subscriber+ Sensitive Information Disclosure via REST Appointments Listing
Slug
easy-appointments
Published
2026-07-09
Title
Easy Appointments < 3.12.28 - Missing Authorization to Authenticated (Author+) Bulk Appointment Manipulation
Slug
easy-appointments
Published
2026-07-23
Title
Easy Appointments < 3.12.28 - Missing Authorization to Authenticated (Contributor+) Arbitrary Connection Deletion
Slug
easy-appointments
Published
2026-07-16
Title
Easy Appointments < 3.12.28 - Unauthenticated Insecure Direct Object Reference
Slug
easy-appointments
Published
2026-08-17
Title
Easy Appointments < 4.0.1 - Contributor+ Sensitive Information Disclosure via REST Appointments Listing