WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
enteraddons
Published
2024-11-22
Title
Enter Addons – Ultimate Template Builder for Elementor < 2.2.0 - Authenticated (Contributor+) Post Disclosure
Slug
enteraddons
Published
2024-12-30
Title
Enter Addons < 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
enteraddons
Published
2025-12-12
Title
Enter Addons < 2.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown and Image Comparison Widgets
Slug
enteraddons
Published
2026-01-28
Title
Enter Addons < 2.3.3 - Cross-Site Request Forgery
Slug
entry-views
Published
2026-01-08
Title
Entry Views <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
envato-affiliater
Published
2025-01-16
Title
Envato Affiliater <= 1.2.4 - Reflected Cross-Site Scripting
Slug
envato-elements
Published
2021-10-21
Title
Envato Elements < 2.0.11 - Contributor+ Arbitrary File Upload
Slug
envato-elements
Published
2025-01-03
Title
Envato Elements < 2.0.15 - Author+ Server-Side Request Forgery
Slug
envialosimple-email-marketing-y-newsletters-gratis
Published
2023-12-27
Title
EnvíaloSimple < 2.3 - API Key Update via CSRF
Slug
envialosimple-email-marketing-y-newsletters-gratis
Published
2023-12-27
Title
EnvíaloSimple < 2.2 Unauthenticated PHP Object Injection
Slug
envialosimple-email-marketing-y-newsletters-gratis
Published
2024-04-01
Title
EnvíaloSimple: Email Marketing y Newsletters < 2.4 - Arbitrary File Upload via CSRF
Slug
envialosimple-email-marketing-y-newsletters-gratis
Published
2024-04-16
Title
EnvíaloSimple: Email Marketing y Newsletters < 2.3 - Reflected Cross-Site Scripting
Slug
envira-gallery-lite
Published
2020-02-25
Title
Envira Photo Gallery < 1.7.7 - Authenticated Stored Cross-Site Scripting (XSS) Issue
Slug
envira-gallery-lite
Published
2020-12-19
Title
Envira Gallery Lite < 1.8.3.3 - Authenticated Stored Cross-Site Scripting
Slug
envira-gallery-lite
Published
2022-10-10
Title
Envira Gallery Lite < 1.8.4.7 - Reflected Cross-Site Scripting
Slug
envira-gallery-lite
Published
2024-01-08
Title
Envira Gallery Lite < 1.8.7.3 - Missing Authorization to Gallery Modification via envira_gallery_insert_images
Slug
envira-gallery-lite
Published
2024-06-20
Title
Envira Photo Gallery < 1.8.8 - Cross-Site Request Forgery to Notice Dismissal
Slug
envira-gallery-lite
Published
2024-08-20
Title
Envira Gallery < 1.8.15 - Author+ Stored XSS
Slug
envira-gallery-lite
Published
2024-08-26
Title
Envira Photo Gallery < 1.8.15 - Missing Authorization
Slug
envira-gallery-lite
Published
2024-12-03
Title
Multiple Plugins - Contributor+ DOM-Based Stored XSS via FancyBox JavaScript Library
Slug
envira-gallery-lite
Published
2025-11-07
Title
Gallery Plugin for WordPress – Envira Photo Gallery < 1.12.0 - Missing Authorization to Authenticated (Contributor+) Gallery Conversion
Slug
envira-gallery-lite
Published
2025-11-12
Title
Gallery Plugin for WordPress – Envira Photo Gallery < 1.12.1 - Missing Authorization to Authenticated (Author+) Multiple Gallery Actions
Slug
envira-gallery-lite
Published
2026-03-03
Title
Envira Gallery for WordPress < 1.12.4 - Authenticated (Author+) Stored Cross-Site Scripting via 'justified_gallery_theme' Parameter via REST API
Slug
envo-elementor-for-woocommerce
Published
2024-02-27
Title
Envo's Elementor Templates & Widgets for WooCommerce < 1.4.5 - Arbitrary Theme Activation via CSRF
Slug
envo-elementor-for-woocommerce
Published
2024-02-27
Title
Envo's Elementor Templates & Widgets for WooCommerce < 1.4.5 - Subscriber+ Template Creation