WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ekc-tournament-manager
Published
2024-10-21
Title
EKC Tournament Manager < 2.2.2 - Cross-Site Request Forgery to Arbitrary File Upload
Slug
ekc-tournament-manager
Published
2024-09-10
Title
EKC Tournament Manager < 2.2.2 - Admin+ Arbitrary File Download
Slug
ekc-tournament-manager
Published
2024-09-10
Title
EKC Tournament Manager < 2.2.2 - Delete Tournaments via CSRF
Slug
ekc-tournament-manager
Published
2024-09-10
Title
EKC Tournament Manager < 2.2.2 - Create Tournaments/Teams via CSRF
Slug
ekiline-block-collection
Published
2024-11-08
Title
Ekiline Block Collection < 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elastic-email-sender
Published
2023-07-20
Title
Elastic Email Sender < 1.2.7 - Admin+ Stored XSS
Slug
elastic-email-sender
Published
2025-10-28
Title
Elastic Email Sender < 1.2.21 - Missing Authorization
Slug
elastic-email-subscribe-form
Published
2025-06-05
Title
Elastic Email Subscribe Form <= 1.2.2 - Missing Authorization
Slug
elastic-theme-editor
Published
2025-11-10
Title
Elastic Theme Editor <= 0.0.3 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
elasticpress
Published
2021-03-01
Title
ElasticPress < 3.5.4 - Cross-Site Request Forgery
Slug
elasticpress
Published
2024-06-06
Title
ElasticPress < 5.1.2 - Data Sync via CSRF
Slug
elasticpress
Published
2026-09-11
Title
ElasticPress < 5.3.5 - Unauthenticated Information Exposure
Slug
elastik-page-builder
Published
2024-09-30
Title
Elastik Page Builder <= 0.27.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
ele-blog
Published
2024-04-30
Title
Eleblog – Elementor Blog And Magazine Addons <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ele-blog
Published
2024-12-03
Title
Eleblog – Elementor Blog And Magazine Addons <= 1.8 - Missing Authorization to Authenticated (Subscriber+) Deactivation Submission
Slug
ele-blog
Published
2026-02-05
Title
Eleblog – Elementor Blog And Magazine Addons <= 2.0.3 - Unauthenticated Local File Inclusion
Slug
ele-conditions
Published
2025-09-05
Title
Elementor Element Condition < 1.0.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
ele-custom-skin
Published
2026-08-13
Title
ECS < 4.3.8 - Unauthenticated Private Content Disclosure via ecsload
Slug
ele-custom-skin
Published
2026-08-13
Title
ECS < 4.3.8 - Contributor+ Stored XSS via Dynamic Repeater Bindings
Slug
ele-custom-skin
Published
2026-08-13
Title
ECS < 4.3.13 - Contributor+ Arbitrary Post Binding and Global Preset Modification via Dynamic Repeater Handlers
Slug
ele-custom-skin
Published
2026-08-14
Title
ECS < 4.3.10 - Contributor+ Arbitrary Post Meta Disclosure via Dynamic Repeater ACF Source
Slug
electio-core
Published
2026-01-28
Title
Electio Core <= 1.4 - Unauthenticated SQL Injection
Slug
electric-enquiries
Published
2026-02-26
Title
Electric Enquiries <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' Shortcode Attribute
Slug
electric-studio-client-login
Published
2023-04-14
Title
Electric Studio Client Login <= 0.8.1 - Admin+ Stored XSS
Slug
electric-studio-download-counter
Published
2026-01-13
Title
Electric Studio Download Counter <= 2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings Parameters