WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
everest-forms
Published
2025-01-23
Title
Everest Forms < 3.0.8.1 - Admin+ Stored XSS
Slug
everest-forms
Published
2025-02-17
Title
Everest Forms < 3.0.9.5 - Unauthenticated Arbitrary File Upload, Read, and Deletion
Slug
everest-forms
Published
2025-04-10
Title
Everest Forms < 3.1.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Slug
everest-forms
Published
2025-04-10
Title
Everest Forms < 3.1.2 - Reflected Cross-Site Scripting
Slug
everest-forms
Published
2025-04-10
Title
Everest Forms < 3.1.2 - Unauthenticated PHP Object Injection
Slug
everest-forms
Published
2025-07-01
Title
Everest Forms < 3.2.3 - Unauthenticated PHP Object Injection
Slug
everest-forms-frontend-listing
Published
2025-07-02
Title
Everest Forms - Frontend Listing <= 1.0.5 - Unauthenticated PHP Object Injection
Slug
everest-forms-pro
Published
2025-06-24
Title
Everest Forms (Pro) < 1.9.5 - Unauthenticated Arbitrary File Deletion via Path Traversal
Slug
everest-forms-pro
Published
2025-11-04
Title
Everest Forms (Pro) < 1.9.8 - Unauthenticated PHP Object Injection via PHAR Deserialization in Form Signature
Slug
everest-gallery-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
everest-google-places-reviews-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
everest-review-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
everest-tab-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
everest-timeline-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
evergreen-content-poster
Published
2023-11-27
Title
Evergreen Content Poster < 1.4.1 - Admin+ Stored XSS
Slug
evergreen-content-poster
Published
2024-03-15
Title
Evergreen Content Poster < 1.4.2 - Reflected Cross-Site Scripting
Slug
evergreen-content-poster
Published
2024-04-22
Title
Evergreen Content Poster < 1.4.3 - Missing Authorization
Slug
evergreen-content-poster
Published
2025-01-17
Title
Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media < 1.4.5 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Slug
evergreen-content-poster
Published
2025-07-12
Title
Evergreen Content Poster < 1.4.6 - Cross-Site Request Forgery
Slug
evergreen-content-poster
Published
2025-04-22
Title
Evergreen Content Poster < 1.4.6 - Missing Authorization
Slug
evergreen-post-tweeter
Published
2025-12-18
Title
Evergreen Post Tweeter <= 1.8.9 - Cross-Site Request Forgery
Slug
everlightbox
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
everlightbox
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
evernote-sync
Published
2024-12-12
Title
Evernote Sync <= 3.0.0 - Reflected Cross-Site Scripting
Slug
everse-starter-sites
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius