WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
everlightbox
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
evernote-sync
Published
2024-12-12
Title
Evernote Sync <= 3.0.0 - Reflected Cross-Site Scripting
Slug
everse-starter-sites
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
everse-starter-sites
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
everviz
Published
2025-11-17
Title
everviz <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ewww-image-optimizer
Published
2014-10-09
Title
EWWW Image Optimizer 2.0.1 - Cross-Site Scripting (XSS)
Slug
ewww-image-optimizer
Published
2016-06-09
Title
EWWW Image Optimizer <= 2.8.3 - Remote Code Execution
Slug
ewww-image-optimizer
Published
2020-09-06
Title
EWWW Image Optimizer < 5.9 - Cross-Site Request Forgery
Slug
ewww-image-optimizer
Published
2023-11-14
Title
EWWW Image Optimizer < 7.2.1 - Unauthenticated Sensitive Information Exposure via Debug Log
Slug
ewww-image-optimizer
Published
2023-09-08
Title
EWWW Image Optimizer < 7.2.1 - Sensitive Information Exposure
Slug
ewww-image-optimizer
Published
2024-04-10
Title
EWWW Image Optimizer < 7.3.0 - Cross-Site Request Forgery
Slug
ewww-image-optimizer
Published
2026-09-02
Title
EWWW Image Optimizer < 8.7.7 - Unauthenticated Stored XSS
Slug
ewww-image-optimizer
Published
2026-08-18
Title
EWWW Image Optimizer < 8.7.4 - Contributor+ Stored XSS via 'data-script' Lazy Load Attribute in Post Content
Slug
ewww-image-optimizer
Published
2026-09-30
Title
EWWW Image Optimizer < 8.8.0 - Contributor+ Stored XSS
Slug
ewww-image-optimizer
Published
2026-10-02
Title
EWWW Image Optimizer < 8.8.0 - Reflected XSS via REQUEST_URI Parameter Key
Slug
ewww-image-optimizer
Published
2026-09-15
Title
EWWW Image Optimizer < 8.7.7 - Author+ Stored XSS via Image Class Attribute Backreference Expansion
Slug
ewww-image-optimizer
Published
2026-09-28
Title
EWWW Image Optimizer 8.6.0 - 8.7.7 - Author+ PHP Object Injection via 'eio_page_settings' Post Meta
Slug
ewww-image-optimizer
Published
2026-09-28
Title
EWWW Image Optimizer < 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration Handler
Slug
exact-links
Published
2025-07-04
Title
URL Shortener <= 3.0.7 - Unauthenticated Server-Side Request Forgery
Slug
exact-links
Published
2025-07-11
Title
URL Shortener <= 3.0.7 - Unauthenticated SQL Injection
Slug
exact-links
Published
2025-07-11
Title
URL Shortener <= 3.0.7 - Unauthenticated PHP Object Injection
Slug
exact-links
Published
2025-07-15
Title
URL Shortener <= 3.0.7 - Missing Authorization
Slug
exact-links
Published
2025-10-23
Title
URL Shortener Plugin For WordPress <= 3.0.7 - Missing Authorization to Authenticated (Subscriber+) Link Manipulation
Slug
exact-links
Published
2025-12-12
Title
URL Shortener Plugin For WordPress <= 3.0.7 - Unauthenticated SQL Injection
Slug
exam-matrix
Published
2024-10-25
Title
Exam Matrix <= 1.5 - Unauthenticated Privilege Escalation