WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
everest-forms-pro
Published
2026-03-12
Title
Everest Forms Pro < 1.9.13 - Unauthenticated Stored Cross-Site Scripting
Slug
everest-forms-pro
Published
2026-03-30
Title
Everest Forms Pro < 1.9.13 - Unauthenticated Remote Code Execution via Calculation Field
Slug
everest-gallery-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
everest-google-places-reviews-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
everest-review-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
everest-tab-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
everest-timeline-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
evergreen-content-poster
Published
2023-11-27
Title
Evergreen Content Poster < 1.4.1 - Admin+ Stored XSS
Slug
evergreen-content-poster
Published
2024-03-15
Title
Evergreen Content Poster < 1.4.2 - Reflected Cross-Site Scripting
Slug
evergreen-content-poster
Published
2024-04-22
Title
Evergreen Content Poster < 1.4.3 - Missing Authorization
Slug
evergreen-content-poster
Published
2025-01-17
Title
Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media < 1.4.5 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Slug
evergreen-content-poster
Published
2025-07-12
Title
Evergreen Content Poster < 1.4.6 - Cross-Site Request Forgery
Slug
evergreen-content-poster
Published
2025-04-22
Title
Evergreen Content Poster < 1.4.6 - Missing Authorization
Slug
evergreen-post-tweeter
Published
2025-12-18
Title
Evergreen Post Tweeter <= 1.8.9 - Cross-Site Request Forgery
Slug
everlightbox
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
everlightbox
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
evernote-sync
Published
2024-12-12
Title
Evernote Sync <= 3.0.0 - Reflected Cross-Site Scripting
Slug
everse-starter-sites
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
everse-starter-sites
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
everviz
Published
2025-11-17
Title
everviz <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ewww-image-optimizer
Published
2014-10-09
Title
EWWW Image Optimizer 2.0.1 - Cross-Site Scripting (XSS)
Slug
ewww-image-optimizer
Published
2016-06-09
Title
EWWW Image Optimizer <= 2.8.3 - Remote Code Execution
Slug
ewww-image-optimizer
Published
2020-09-06
Title
EWWW Image Optimizer < 5.9 - Cross-Site Request Forgery
Slug
ewww-image-optimizer
Published
2023-11-14
Title
EWWW Image Optimizer < 7.2.1 - Unauthenticated Sensitive Information Exposure via Debug Log
Slug
ewww-image-optimizer
Published
2023-09-08
Title
EWWW Image Optimizer < 7.2.1 - Sensitive Information Exposure