WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
exclusive-addons-for-elementor
Published
2024-04-29
Title
Exclusive Addons Elementor < 2.6.9.2 - Missing Authorization to Post Duplication
Slug
exclusive-addons-for-elementor
Published
2024-05-14
Title
Exclusive Addons for Elementor < 2.6.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget
Slug
exclusive-addons-for-elementor
Published
2024-06-25
Title
Exclusive Addons for Elementor < 2.6.9.9 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Card Widget
Slug
exclusive-addons-for-elementor
Published
2024-10-15
Title
Exclusive Addons Elementor < 2.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
exclusive-addons-for-elementor
Published
2024-10-28
Title
Exclusive Addons for Elementor < 2.7.5 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Slug
exclusive-addons-for-elementor
Published
2025-02-27
Title
Exclusive Addons for Elementor < 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Image Comparison Widgets
Slug
exclusive-addons-for-elementor
Published
2025-05-26
Title
Exclusive Addons for Elementor < 2.7.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget
Slug
exclusive-addons-for-elementor
Published
2025-05-19
Title
Exclusive Addons Elementor < 2.7.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
exclusive-addons-for-elementor
Published
2025-08-05
Title
Exclusive Addons for Elementor < 2.7.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown
Slug
exclusive-blocks
Published
2025-04-01
Title
Design Blocks <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
exclusive-content-password-protect
Published
2024-11-13
Title
Exclusive Content Password Protect <= 1.1.0 - Cross-Site Request Forgery to Arbitrary File Upload
Slug
exclusive-divi
Published
2024-11-15
Title
Exclusive Divi – Divi Preloader, Modules for Divi & Extra Theme <= 1.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
exertio-framework
Published
2025-02-28
Title
Exertio Framework < 1.3.2 - Unauthenticated Arbitrary User Password Update
Slug
exertio-framework
Published
2025-08-25
Title
Exertio Framework <= 1.3.3 - Subscriber+ SQL Injection
Slug
exhibit-to-wp-gallery
Published
2024-12-03
Title
Exhibit to WP Gallery <= 0.0.2 - Reflected XSS
Slug
exit-intent-popups-by-optimonk
Published
2023-07-11
Title
OptiMonk < 2.0.5 - Account ID Update via CSRF
Slug
exit-notifier
Published
2024-09-12
Title
Exit Notifier < 1.10.6 - Reflected Cross-Site Scripting
Slug
exit-popup-free
Published
2025-03-31
Title
Exit Popup Free <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
exit-popup-show
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
exitintentpopup
Published
2025-09-03
Title
Exit Intent Popup < 1.0.3 - Unauthenticated Server-Side Request Forgery
Slug
exmage-wp-image-links
Published
2022-03-28
Title
EXMAGE < 1.0.7 - Admin+ Blind SSRF
Slug
expand-maker
Published
2023-09-11
Title
Read More & Accordion < 3.2.7 - Admin+ PHP Object Injection
Slug
expand-maker
Published
2025-02-12
Title
Read More & Accordion < 3.4.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary 'Read More' Post Deletion
Slug
expand-maker
Published
2025-04-04
Title
Read More & Accordion < 3.4.8 - Local File Inclusion via CSRF
Slug
expand-maker
Published
2025-12-15
Title
Read More & Accordion < 3.5.6 - Missing Authorization