WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
envato-affiliater
Published
2025-01-16
Title
Envato Affiliater <= 1.2.4 - Reflected Cross-Site Scripting
Slug
envato-elements
Published
2021-10-21
Title
Envato Elements < 2.0.11 - Contributor+ Arbitrary File Upload
Slug
envato-elements
Published
2025-01-03
Title
Envato Elements < 2.0.15 - Author+ Server-Side Request Forgery
Slug
envialosimple-email-marketing-y-newsletters-gratis
Published
2023-12-27
Title
EnvíaloSimple < 2.3 - API Key Update via CSRF
Slug
envialosimple-email-marketing-y-newsletters-gratis
Published
2023-12-27
Title
EnvíaloSimple < 2.2 Unauthenticated PHP Object Injection
Slug
envialosimple-email-marketing-y-newsletters-gratis
Published
2024-04-01
Title
EnvíaloSimple: Email Marketing y Newsletters < 2.4 - Arbitrary File Upload via CSRF
Slug
envialosimple-email-marketing-y-newsletters-gratis
Published
2024-04-16
Title
EnvíaloSimple: Email Marketing y Newsletters < 2.3 - Reflected Cross-Site Scripting
Slug
envira-gallery-lite
Published
2020-02-25
Title
Envira Photo Gallery < 1.7.7 - Authenticated Stored Cross-Site Scripting (XSS) Issue
Slug
envira-gallery-lite
Published
2020-12-19
Title
Envira Gallery Lite < 1.8.3.3 - Authenticated Stored Cross-Site Scripting
Slug
envira-gallery-lite
Published
2022-10-10
Title
Envira Gallery Lite < 1.8.4.7 - Reflected Cross-Site Scripting
Slug
envira-gallery-lite
Published
2024-01-08
Title
Envira Gallery Lite < 1.8.7.3 - Missing Authorization to Gallery Modification via envira_gallery_insert_images
Slug
envira-gallery-lite
Published
2024-06-20
Title
Envira Photo Gallery < 1.8.8 - Cross-Site Request Forgery to Notice Dismissal
Slug
envira-gallery-lite
Published
2024-08-20
Title
Envira Gallery < 1.8.15 - Author+ Stored XSS
Slug
envira-gallery-lite
Published
2024-08-26
Title
Envira Photo Gallery < 1.8.15 - Missing Authorization
Slug
envira-gallery-lite
Published
2024-12-03
Title
Multiple Plugins - Contributor+ DOM-Based Stored XSS via FancyBox JavaScript Library
Slug
envira-gallery-lite
Published
2025-11-07
Title
Gallery Plugin for WordPress – Envira Photo Gallery < 1.12.0 - Missing Authorization to Authenticated (Contributor+) Gallery Conversion
Slug
envira-gallery-lite
Published
2025-11-12
Title
Gallery Plugin for WordPress – Envira Photo Gallery < 1.12.1 - Missing Authorization to Authenticated (Author+) Multiple Gallery Actions
Slug
envo-elementor-for-woocommerce
Published
2024-02-27
Title
Envo's Elementor Templates & Widgets for WooCommerce < 1.4.5 - Arbitrary Theme Activation via CSRF
Slug
envo-elementor-for-woocommerce
Published
2024-02-27
Title
Envo's Elementor Templates & Widgets for WooCommerce < 1.4.5 - Subscriber+ Template Creation
Slug
envo-elementor-for-woocommerce
Published
2024-02-27
Title
Envo's Elementor Templates & Widgets for WooCommerce < 1.4.5 - Arbitrary Plugin Activation via CSRF
Slug
envo-elementor-for-woocommerce
Published
2024-05-10
Title
Envo's Elementor Templates & Widgets for WooCommerce < 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
envo-elementor-for-woocommerce
Published
2024-08-16
Title
Envo's Elementor Templates & Widgets for WooCommerce < 1.4.17 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
envo-elementor-for-woocommerce
Published
2024-10-24
Title
Envo's Elementor Templates & Widgets for WooCommerce < 1.4.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
envo-extra
Published
2023-10-17
Title
Envo Extra < 1.8.4 - Cross-Site Request Forgery
Slug
envo-extra
Published
2024-04-15
Title
Envo Extra < 1.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting