WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
exclusive-addons-for-elementor
Published
2025-05-26
Title
Exclusive Addons for Elementor < 2.7.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget
Slug
exclusive-addons-for-elementor
Published
2025-05-19
Title
Exclusive Addons Elementor < 2.7.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
exclusive-addons-for-elementor
Published
2025-08-05
Title
Exclusive Addons for Elementor < 2.7.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown
Slug
exclusive-blocks
Published
2025-04-01
Title
Design Blocks <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
exclusive-content-password-protect
Published
2024-11-13
Title
Exclusive Content Password Protect <= 1.1.0 - Cross-Site Request Forgery to Arbitrary File Upload
Slug
exclusive-divi
Published
2024-11-15
Title
Exclusive Divi – Divi Preloader, Modules for Divi & Extra Theme <= 1.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
exertio-framework
Published
2025-02-28
Title
Exertio Framework < 1.3.2 - Unauthenticated Arbitrary User Password Update
Slug
exertio-framework
Published
2025-08-25
Title
Exertio Framework <= 1.3.3 - Subscriber+ SQL Injection
Slug
exhibit-to-wp-gallery
Published
2024-12-03
Title
Exhibit to WP Gallery <= 0.0.2 - Reflected XSS
Slug
exit-intent-popups-by-optimonk
Published
2023-07-11
Title
OptiMonk < 2.0.5 - Account ID Update via CSRF
Slug
exit-notifier
Published
2024-09-12
Title
Exit Notifier < 1.10.6 - Reflected Cross-Site Scripting
Slug
exit-popup-free
Published
2025-03-31
Title
Exit Popup Free <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
exit-popup-show
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
exitintentpopup
Published
2025-09-03
Title
Exit Intent Popup < 1.0.3 - Unauthenticated Server-Side Request Forgery
Slug
exmage-wp-image-links
Published
2022-03-28
Title
EXMAGE < 1.0.7 - Admin+ Blind SSRF
Slug
expand-maker
Published
2023-09-11
Title
Read More & Accordion < 3.2.7 - Admin+ PHP Object Injection
Slug
expand-maker
Published
2025-02-12
Title
Read More & Accordion < 3.4.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary 'Read More' Post Deletion
Slug
expand-maker
Published
2025-04-04
Title
Read More & Accordion < 3.4.8 - Local File Inclusion via CSRF
Slug
expand-maker
Published
2025-12-15
Title
Read More & Accordion < 3.5.6 - Missing Authorization
Slug
expandable-paywall
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
expandable-paywall
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
expert-invoice
Published
2024-05-28
Title
Expert Invoice <= 1.0.2 -Admin+ Stored XSS
Slug
experto-cta-widget
Published
2025-05-15
Title
Experto CTA Widget – Call To Action, Sticky CTA, Floating Button Plugin < 1.2.1 - Missing Authorization to Unauthenticated Settings Update
Slug
experto-custom-dashboard
Published
2026-04-08
Title
Experto Dashboard for WooCommerce < 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Navigation Font Size' Setting
Slug
expire-tags
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius