WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-appointments
Published
2024-03-28
Title
Easy Appointments < 3.11.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-appointments
Published
2024-03-28
Title
Easy Appointments < 3.11.19 - Insufficient Authorization
Slug
easy-appointments
Published
2025-09-09
Title
Easy Appointments < 3.12.14.1 - Unauthenticated Arbitrary Shortcode Execution
Slug
easy-author-image
Published
2015-05-26
Title
Easy Author Image 1.5 - Email Disclosure
Slug
easy-author-image
Published
2026-02-18
Title
Easy Author Image <= 1.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Picture URL
Slug
easy-automatic-newsletter
Published
2025-01-16
Title
Easy Automatic Newsletter Lite <= 3.2.0 - Reflected Cross-Site Scripting
Slug
easy-banners
Published
2014-08-01
Title
Easy Banners 1.4 - Cross-Site Scripting (XSS)
Slug
easy-bet
Published
2025-01-16
Title
Easy Bet <= 1.0.7 - Reflected Cross-Site Scripting
Slug
easy-blocks-pro
Published
2024-12-05
Title
Easy Blocks pro <= 1.0.21 - Missing Authorization
Slug
easy-booked
Published
2025-02-11
Title
Easy Booked – Appointment Booking and Scheduling Management System for WordPress < 2.4.6 - Cross-Site Request Forgery
Slug
easy-bootstrap-shortcodes
Published
2022-12-24
Title
Easy Bootstrap Shortcode <= 4.5.4 - Contributor+ Stored XSS
Slug
easy-broken-link-checker
Published
2025-02-13
Title
Easy Broken Link Checker <= 9.0.2 - Reflected XSS
Slug
easy-broken-link-checker
Published
2025-02-16
Title
easy-broken-link-checker <= 9.0.2 - Admin+ Stored XSS
Slug
easy-broken-link-checker
Published
2025-02-16
Title
easy-broken-link-checker <= 9.0.2 - Bulk Actions via CSRF
Slug
easy-broken-link-checker
Published
2025-01-16
Title
URL Shortener | Conversion Tracking | AB Testing | WooCommerce <= 9.0.2 - Reflected Cross-Site Scripting
Slug
easy-call-now
Published
2023-11-16
Title
Easy Call Now by ThikShare <= 1.1.0 - Cross-Site Request Forgery via settings_page
Slug
easy-call-now-button
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-call-now-button
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-caller-with-moceanapi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-captcha
Published
2023-07-18
Title
Easy Captcha <= 1.0 - Reflected Cross-Site Scripting
Slug
easy-captcha
Published
2023-07-18
Title
Easy Captcha <= 1.0 - Missing Authorization
Slug
easy-career-openings
Published
2014-08-01
Title
Easy Career Openings <= 0.4 - jobid Parameter SQL Injection
Slug
easy-career-openings
Published
2014-05-28
Title
Easy Career Opening <= 0.4 - Cross-Site Scripting (XSS)
Slug
easy-chart-builder
Published
2025-02-03
Title
Easy Chart Builder for WordPress <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-charts
Published
2025-02-22
Title
Easy Charts < 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting