WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
enhanced-tooltipglossary
Published
2024-11-25
Title
Multiple Plugins from CreativeMindsSolutions - Reflected XSS
Slug
enhanced-wordpress-contactform
Published
2023-03-31
Title
Enhanced WP Contact Form <= 2.3 - Admin+ Stored XSS
Slug
enhanced-youtube-shortcode
Published
2025-01-16
Title
Enhanced YouTube Shortcode <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
enigma-buttons
Published
2025-06-25
Title
e.nigma buttons <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
enjoy-instagram-instagram-responsive-images-gallery-and-carousel
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
enjoy-instagram-instagram-responsive-images-gallery-and-carousel
Published
2024-02-20
Title
Enjoy Social Feed <= 6.2.2 - Unauthenticated Arbitrary Instagram Account Unlinking
Slug
enjoy-instagram-instagram-responsive-images-gallery-and-carousel
Published
2024-02-20
Title
Enjoy Social Feed <= 6.2.2 - Subscriber+ Plugin Database Reset
Slug
enl-newsletter
Published
2014-08-01
Title
ENL Newsletter 1.0.1 - wp-admin/admin.php enl-add-new Page id Parameter SQL Injection
Slug
enl-newsletter
Published
2024-04-05
Title
ENL Newsletter <= 1.0.1 - Stored XSS via CSRF
Slug
enl-newsletter
Published
2024-04-05
Title
ENL Newsletter <= 1.0.1 - Campaign Deletion via CSRF
Slug
enl-newsletter
Published
2024-04-05
Title
ENL Newsletter <= 1.0.1 - Admin+ SQL Injection
Slug
enqueue-anything
Published
2022-05-17
Title
Enqueue Anything <= 1.0.1 - Subscriber+ Arbitrary Asset/Post Deletion
Slug
enquiry-quotation-for-woocommerce
Published
2023-04-03
Title
Product Enquiry for WooCommerce < 2.2.13 - Admin+ Stored XSS
Slug
enquiry-quotation-for-woocommerce
Published
2024-09-26
Title
Product Enquiry for WooCommerce < 2.2.33.34 - Authenticated (Author+) PHP Object Injection in enquiry_detail.php
Slug
enteraddons
Published
2024-05-08
Title
Enter Addons < 2.1.6 - Contributor+ Stored XSS via Animation Title widget
Slug
enteraddons
Published
2024-05-08
Title
Enter Addons < 2.1.6 - Contributor+ Stored XSS via Heading widget
Slug
enteraddons
Published
2024-06-27
Title
Enter Addons < 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
enteraddons
Published
2024-08-09
Title
Enter Addons < 2.2.0 - Contributor+ Stored XSS
Slug
enteraddons
Published
2024-09-06
Title
Enter Addons – Ultimate Template Builder for Elementor < 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Events Card Widget
Slug
enteraddons
Published
2024-09-30
Title
Enter Addons < 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
enteraddons
Published
2024-11-22
Title
Enter Addons – Ultimate Template Builder for Elementor < 2.2.0 - Authenticated (Contributor+) Post Disclosure
Slug
enteraddons
Published
2024-12-30
Title
Enter Addons < 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
enteraddons
Published
2025-12-12
Title
Enter Addons < 2.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown and Image Comparison Widgets
Slug
enteraddons
Published
2026-01-28
Title
Enter Addons < 2.3.3 - Cross-Site Request Forgery
Slug
entry-views
Published
2026-01-08
Title
Entry Views <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode