WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
email-log
Published
2021-10-18
Title
Email Log < 2.4.7 - Admin+ SQL Injection
Slug
email-log
Published
2021-11-08
Title
Email Log < 2.4.8 - Reflected Cross-Site Scripting
Slug
email-log
Published
2024-05-23
Title
Email Log < 2.4.9 - Unauthenticated Hook Injection
Slug
email-my-posts
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
email-newsletter
Published
2014-08-01
Title
Email Newsletter <= 8.0 - Information Disclosure
Slug
email-newsletter
Published
2014-08-01
Title
Email Newsletter <= 8.0 - Information Disclosure
Slug
email-newsletter
Published
2015-11-24
Title
Email newsletter <= 20.13.6 - Authenticated Cross-Site Scripting (XSS)
Slug
email-newsletter
Published
2015-12-01
Title
Email Newsletter <= 20.15 - SQL Injection
Slug
email-notification-on-login
Published
2025-05-07
Title
Email Notification on Login <= 1.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
email-obfuscate-shortcode
Published
2024-09-12
Title
Email Obfuscate Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
email-on-publish
Published
2025-01-16
Title
Email on Publish <= 1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
email-posts-to-subscribers
Published
2023-10-02
Title
Email posts to subscribers <= 6.2 - Admin+ Stored XSS
Slug
email-posts-to-subscribers
Published
2023-04-18
Title
Email posts to subscribers <= 6.2 - Unauthenticated SQLi
Slug
email-posts-to-subscribers
Published
2023-09-05
Title
Email posts to subscribers <= 6.2 - Missing Authorization to Sensitive Information Exposure
Slug
email-queue
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
email-reminders
Published
2024-12-09
Title
Email Reminders < 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
email-reminders
Published
2025-01-03
Title
Email Reminders < 2.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
email-shortcode
Published
2025-04-14
Title
Event Espresso – Custom Email Template Shortcode <= 1.0.0 - Reflected Cross-Site Scripting
Slug
email-subscribe
Published
2023-04-07
Title
Email Subscription Popup < 1.2.17 - Reflected XSS
Slug
email-subscribe
Published
2023-12-05
Title
Email Subscription Popup < 1.2.19 - Reflected Cross-Site Scripting
Slug
email-subscribe
Published
2023-12-15
Title
Email Subscription Popup < 1.2.20 - Reflected XSS
Slug
email-subscribe
Published
2024-03-13
Title
Email Subscription Popup < 1.2.21 - Unauthenticated Stored Cross-Site Scripting
Slug
email-subscribe
Published
2024-11-18
Title
Email Subscription Popup < 1.2.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via print_email_subscribe_form Shortcode
Slug
email-subscribe
Published
2025-01-24
Title
Email Subscription Popup < 1.2.24 - Authenticated (Administrator+) SQL Injection
Slug
email-subscribe
Published
2025-10-22
Title
Email Subscription Popup < 1.2.27 - Authenticated (Administrator+) Stored Cross-Site Scripting