WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
emc2-alert-boxes
Published
2025-01-03
Title
EMC2 Alert Boxes <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
emerce-core
Published
2026-01-28
Title
Emerce Core <= 1.8 - Unauthenticated SQL Injection
Slug
emergency-password-reset
Published
2024-06-03
Title
Emergency Password Reset < 9.0 - Cross-Site Request Forgery
Slug
emergency-password-reset
Published
2025-09-22
Title
Emergency Password Reset < 9.4 - Cross-Site Request Forgery
Slug
emi-calculator
Published
2025-01-18
Title
EMI Calculator <= 1.1 - Missing Authorization to Unauthenticated Settings Change
Slug
emma-emarketing-plugin
Published
2025-04-04
Title
Emma for WordPress <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
emoji-shortcode
Published
2024-10-31
Title
Emoji Shortcode <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
empik-for-woocommerce
Published
2025-04-10
Title
EmpikPlace for Woocommerce < 1.4.5 - Authenticated (Subscriber+) PHP Object Injection
Slug
emplibot
Published
2025-12-12
Title
Emplibot – AI Content Writer with Keyword Research, Infographics, and Linking | SEO Optimized | Fully Automated < 1.1.0 - Authenticated (Admin+) Server-Side Request Forgery
Slug
employee-directory
Published
2025-06-03
Title
Staff Directory – Employee Directory for WordPress < 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
employee-directory
Published
2025-08-04
Title
Employee Directory < 4.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter
Slug
employee-directory
Published
2025-08-25
Title
Employee Directory – Staff Listing & Team Directory Plugin for WordPress <= 4.5.3 - Unauthenticated PHP Object Injection
Slug
employee-spotlight
Published
2025-08-25
Title
Employee Spotlight < 5.1.2 - Unauthenticated PHP Object Injection
Slug
employee-spotlight
Published
2025-09-23
Title
Multiple Plugins by eMarket Design <= Various Versions - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
employee-spotlight
Published
2025-10-31
Title
Employee Spotlight – Team Member Showcase & Meet the Team Plugin < 5.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
employee-spotlight
Published
2025-12-12
Title
Employee Spotlight – Team Member Showcase & Meet the Team Plugin < 5.1.4 - Missing Authorization to Authenticated (Subscriber+) Tracking Opt-In/Opt-Out Modification
Slug
employee-staff-directory
Published
2026-02-05
Title
Employee Directory < 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'form_title' Shortcode Attribute
Slug
empty-cart-button-for-woocommerce
Published
2024-06-21
Title
Empty Cart Button for WooCommerce <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
empty-tags-remover
Published
2025-01-20
Title
Empty Tags Remover < 1.1.0 - Reflected Cross-Site Scripting
Slug
emu2-email-users-2
Published
2025-08-16
Title
Emu2 <= 0.83b - Reflected Cross-Site Scripting
Slug
en-masse-wp
Published
2025-03-19
Title
En Masse <= 1.0 - Reflected Cross-Site Scripting
Slug
enable-accessibility
Published
2023-04-13
Title
Enable Accessibility <= 1.4 - CSRF
Slug
enable-accessibility
Published
2025-01-06
Title
Enable Accessibility <= 1.4.1 - Reflected Cross-Site Scripting
Slug
enable-latex
Published
2025-09-05
Title
Enable Latex <= 1.2.16 - Cross-Site Request Forgery
Slug
enable-media-replace
Published
2014-08-01
Title
Enable Media Replace <= 2.3 - Multiple Vulnerabilities