WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
eonsr-aeo-agent
Published
2026-07-31
Title
EONSR AEO Agent <= 3.9.4 - Unauthenticated Stored XSS via Scheduled Post Creation
Slug
ep4-more-embeds
Published
2025-02-02
Title
EP4 More Embeds <= 1.0.0 - Unauthenticated Stored Cross-Site Scripting
Slug
epaperflip-publisher
Published
2026-06-08
Title
ePaperFlip Publisher <= 1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'publicationid' Shortcode Attribute
Slug
epaybg-payments
Published
2025-07-18
Title
EPay.bg Payments <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
epayco-gateway
Published
2026-08-25
Title
ePayco plugin for WooCommerce < 8.4.7 - Unauthenticated SQL Injection
Slug
epayco-gateway
Published
2026-09-02
Title
ePayco Payment Gateway for WooCommerce < 8.4.7 - Unauthenticated Payment Confirmation Bypass
Slug
epeken-all-kurir
Published
2025-04-09
Title
Epeken All Kurir < 2.1.2 - Stored XSS via CSRF
Slug
epeken-all-kurir
Published
2025-08-27
Title
Epeken All Kurir < 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
epeken-all-kurir
Published
2025-09-22
Title
Epeken All Kurir < 2.1.2 - Shop manager+ Stored XSS
Slug
epeken-all-kurir
Published
2026-08-12
Title
Epeken All Kurir <= 2.1.4 - Unauthenticated Order Payment Confirmation Forgery
Slug
epermissions
Published
2025-01-16
Title
ePermissions <= 1.2 - Reflected Cross-Site Scripting
Slug
epic-bootstrap-buttons
Published
2025-10-02
Title
Epic Bootstrap Buttons <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icol Parameter
Slug
epic-review
Published
2025-08-30
Title
Epic Review < 1.0.3 - Reflected Cross-Site Scripting
Slug
epicwin-subscribers
Published
2025-06-05
Title
Epicwin Plugin <= 1.5 - Cross-Site Request Forgery to SQL Injection
Slug
epoll-wp-voting
Published
2024-03-25
Title
WP Poll Maker < 3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Slug
epoll-wp-voting
Published
2024-04-05
Title
WP Poll Maker < 3.4 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
epoll-wp-voting
Published
2024-04-15
Title
Poll Maker < 3.5 - Subscriber+ Arbitrary File Upload
Slug
eprolo-dropshipping
Published
2024-04-25
Title
EPROLO Dropshipping < 1.7.2 - Missing Authorization
Slug
eprolo-dropshipping
Published
2025-12-04
Title
EPROLO Dropshipping < 2.4.0 - Missing Authorization to Authenticated (Subscriber+) Tracking Data Modification
Slug
eprolo-dropshipping
Published
2026-08-20
Title
EPROLO-Dropshipping <= 2.4.2 - Missing Authorization
Slug
eps-301-redirects
Published
2019-12-19
Title
301 Redirects - Easy Redirect Manager < 2.45 - Authenticated Arbitrary Redirect Injection and Modification, XSS, and CSRF
Slug
eps-301-redirects
Published
2021-01-18
Title
301 Redirects - Easy Redirect Manager < 2.51 - Authenticated SQL Injection
Slug
er-swiffy-insert
Published
2026-04-21
Title
ER Swiffy Insert <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
ere-recently-viewed
Published
2024-01-31
Title
ERE Recently Viewed < 2.0 - Unauthenticated PHP Object Injection
Slug
ergonet-varnish-cache
Published
2025-12-06
Title
Ergonet Cache < 1.0.14 - Missing Authorization