WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-appointments
Published
2026-09-07
Title
Easy Appointments <= 4.0.2.1 - Unauthenticated Stored Cross-Site Scripting
Slug
easy-appointments
Published
2026-09-18
Title
Easy Appointments < 3.12.28 - Missing Authorization to Authenticated (Contributor+) Sensitive Customer Information Exposure via ea_get_customers_ajax AJAX Action
Slug
easy-appointments
Published
2026-08-17
Title
Easy Appointments < 4.0.1 - Contributor+ Sensitive Information Disclosure via REST Appointments Listing
Slug
easy-appointments
Published
2026-09-16
Title
Easy Appointments < 4.0.2.2 - Unauthenticated Appointment Cancellation/Confirmation via Forgeable Email-Link Token
Slug
easy-appointments
Published
2026-09-16
Title
Easy Appointments 4.0 - 4.0.2.1 - Unauthenticated Arbitrary Appointment Modification and Deletion via IDOR
Slug
easy-author-image
Published
2015-05-26
Title
Easy Author Image 1.5 - Email Disclosure
Slug
easy-author-image
Published
2026-02-18
Title
Easy Author Image <= 1.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Picture URL
Slug
easy-automatic-newsletter
Published
2025-01-16
Title
Easy Automatic Newsletter Lite <= 3.2.0 - Reflected Cross-Site Scripting
Slug
easy-banners
Published
2014-08-01
Title
Easy Banners 1.4 - Cross-Site Scripting (XSS)
Slug
easy-bet
Published
2025-01-16
Title
Easy Bet <= 1.0.7 - Reflected Cross-Site Scripting
Slug
easy-blocks-pro
Published
2024-12-05
Title
Easy Blocks pro <= 1.0.21 - Missing Authorization
Slug
easy-booked
Published
2025-02-11
Title
Easy Booked – Appointment Booking and Scheduling Management System for WordPress < 2.4.6 - Cross-Site Request Forgery
Slug
easy-bootstrap-shortcodes
Published
2022-12-24
Title
Easy Bootstrap Shortcode <= 5.0.1 - Contributor+ Stored XSS
Slug
easy-broken-link-checker
Published
2025-02-13
Title
Easy Broken Link Checker <= 9.0.2 - Reflected XSS
Slug
easy-broken-link-checker
Published
2025-02-16
Title
easy-broken-link-checker <= 9.0.2 - Admin+ Stored XSS
Slug
easy-broken-link-checker
Published
2025-02-16
Title
easy-broken-link-checker <= 9.0.2 - Bulk Actions via CSRF
Slug
easy-broken-link-checker
Published
2025-01-16
Title
URL Shortener | Conversion Tracking | AB Testing | WooCommerce <= 9.0.2 - Reflected Cross-Site Scripting
Slug
easy-call-now
Published
2023-11-16
Title
Easy Call Now by ThikShare <= 1.1.0 - Cross-Site Request Forgery via settings_page
Slug
easy-call-now-button
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-call-now-button
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-caller-with-moceanapi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-captcha
Published
2023-07-18
Title
Easy Captcha <= 1.0 - Reflected Cross-Site Scripting
Slug
easy-captcha
Published
2023-07-18
Title
Easy Captcha <= 1.0 - Missing Authorization
Slug
easy-career-openings
Published
2014-08-01
Title
Easy Career Openings <= 0.4 - jobid Parameter SQL Injection
Slug
easy-career-openings
Published
2014-05-28
Title
Easy Career Opening <= 0.4 - Cross-Site Scripting (XSS)