WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
error-log-viewer
Published
2025-10-10
Title
Error Log Viewer by BestWebSoft < 1.1.7 - Authenticated (Administrator+) Arbitrary File Read
Slug
error-log-viewer-wp
Published
2025-01-06
Title
Error Log Viewer By WP Guru < 1.0.4 - Missing Authorization to Unauthenticated Arbitrary File Read
Slug
error-log-viewer-wp
Published
2025-04-09
Title
Error Log Viewer <= 1.0.5 - Authenticated (Subscriber+) SQL Injection
Slug
error-notification
Published
2025-01-16
Title
Error Notification <= 0.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
esb-testimonials
Published
2024-11-08
Title
ESB Testimonials <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
eshipper-commerce
Published
2026-02-23
Title
eShipper Commerce <= 2.16.12 - Missing Authorization
Slug
eshop
Published
2014-08-01
Title
eShop - wp-admin/admin.php Multiple Parameter XSS
Slug
eshop
Published
2015-05-06
Title
eShop <= 6.3.11 - Remote Code Execution
Slug
eshop
Published
2015-09-09
Title
eShop - Reflected Cross-Site Scripting (XSS) & CSRF
Slug
eshop
Published
2016-02-02
Title
eShop - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
eshop
Published
2016-02-02
Title
eShop - Authenticated Blind SQL Injection
Slug
eshop-magic
Published
2014-08-01
Title
eShop Magic 0.1 - eshop-magic/download.php file Parameter Traversal Arbitrary File Access
Slug
esign-genie-for-wp
Published
2025-06-05
Title
Foxit eSign for WordPress <= 2.0.3 - Authenticated (Admin+) Information Exposure
Slug
esri-map-view
Published
2025-08-05
Title
esri-map-view <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via esri-map-view Shortcode
Slug
essay-wizard-wpcres
Published
2025-01-16
Title
Essay Wizard (wpCRES) <= 1.0.6.4 - Reflected Cross-Site Scripting
Slug
esselinknu-settings
Published
2025-06-19
Title
Esselink.nu Settings <= 3.6 - Cross-Site Request Forgery
Slug
essential-addons-elementor
Published
2023-05-15
Title
Essential Addons for Elementor Pro < 5.4.9 - Reflected XSS
Slug
essential-addons-elementor
Published
2023-05-15
Title
Essential Addons for Elementor Pro < 5.4.9 - Unauthenticated SSRF
Slug
essential-addons-elementor
Published
2024-04-19
Title
Essential Addons for Elementor Pro < 5.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_html_tag'
Slug
essential-addons-elementor
Published
2024-05-28
Title
Essential Addons for Elementor PRO – Best Elementor Templates, Widgets, Kits & WooCommerce Builders < 5.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Carousel Widget
Slug
essential-addons-elementor
Published
2024-06-06
Title
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders < 5.8.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox and Modal Widget
Slug
essential-addons-for-elementor-lite
Published
2021-04-13
Title
Essential Addons for Elementor < 4.5.4 - Contributor+ Stored Cross-Site Scripting (XSS)
Slug
essential-addons-for-elementor-lite
Published
2022-01-31
Title
Essential Addons for Elementor < 5.0.5 - Unauthenticated LFI
Slug
essential-addons-for-elementor-lite
Published
2022-02-18
Title
Essential Addons for Elementor Lite < 5.0.9 - Reflected Cross-Site Scripting
Slug
essential-addons-for-elementor-lite
Published
2023-05-11
Title
Essential Addons for Elementor 5.4.0-5.7.1 - Unauthenticated Privilege Escalation