WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
enhanced-catalog-images-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
enhanced-catalog-images-for-woocommerce
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
enhanced-catalog-images-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
enhanced-e-commerce-for-woocommerce-store
Published
2022-02-01
Title
Conversios.io < 4.6.2 - Subscriber+ SQL Injection
Slug
enhanced-e-commerce-for-woocommerce-store
Published
2023-02-06
Title
Conversios.io < 5.2.4 - Settings Update via CSRF
Slug
enhanced-e-commerce-for-woocommerce-store
Published
2023-10-17
Title
Conversios.io < 6.5.4 - Reflected XSS
Slug
enhanced-e-commerce-for-woocommerce-store
Published
2024-02-27
Title
Conversios < 7.0.8 - Subscriber+ SQL Injection
Slug
enhanced-e-commerce-for-woocommerce-store
Published
2024-02-27
Title
Conversios < 7.0.8 - Subscriber+ SQL Injection via ee_syncProductCategory
Slug
enhanced-e-commerce-for-woocommerce-store
Published
2024-03-25
Title
Conversios.io < 7.0.0 - Reflected Cross-Site Scripting
Slug
enhanced-e-commerce-for-woocommerce-store
Published
2024-06-27
Title
Conversios.io - All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce < 7.1.1 - Reflected Cross-Site Scripting
Slug
enhanced-e-commerce-for-woocommerce-store
Published
2025-03-27
Title
Conversios.io < 7.2.4 - Missing Authorization
Slug
enhanced-e-commerce-for-woocommerce-store
Published
2025-10-05
Title
Conversios.io < 7.2.14 - Missing Authorization
Slug
enhanced-media-library
Published
2024-04-15
Title
Enhanced Media Library < 2.8.10 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
enhanced-paypal-shortcodes
Published
2025-04-25
Title
Enhanced Paypal Shortcodes <= 0.5a - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
enhanced-plugin-admin
Published
2017-04-14
Title
Enhanced Plugin Admin <= 1.15 - XSS
Slug
enhanced-plugin-admin
Published
2023-11-12
Title
Enhanced Admin < 1.17 - CSRF
Slug
enhanced-text-widget
Published
2023-07-27
Title
Multiple Plugins from Inisev - Subscriber+ Plugin Installation
Slug
enhanced-text-widget
Published
2023-07-27
Title
Multiple Plugins from Inisev - Plugin Installation via CSRF
Slug
enhanced-text-widget
Published
2024-02-13
Title
Enhanced Text Widget < 1.6.6 - Admin+ Stored XSS
Slug
enhanced-tooltipglossary
Published
2016-05-11
Title
enhanced-tooltipglossary <= 3.3.4 - XSS
Slug
enhanced-tooltipglossary
Published
2021-09-06
Title
CM Tooltip Glossary < 3.9.21 - Contributor+ Stored Cross-Site Scripting
Slug
enhanced-tooltipglossary
Published
2024-04-24
Title
CM Tooltip Glossary < 4.3.0 - Settings Update via CSRF
Slug
enhanced-tooltipglossary
Published
2024-08-07
Title
CM Tooltip Glossary < 4.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
enhanced-tooltipglossary
Published
2024-10-09
Title
CM Tooltip Glossary < 4.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
enhanced-tooltipglossary
Published
2024-05-01
Title
CM Tooltip Glossary < 4.3.4 - Admin+ Stored XSS