WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-gallery-slideshow
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
easy-github-gist-shortcodes
Published
2026-01-06
Title
Easy GitHub Gist Shortcodes <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
Slug
easy-google-map
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
easy-hide-login
Published
2023-05-09
Title
Easy Hide Login < 1.0.8 - Admin+ Stored XSS
Slug
easy-hide-login
Published
2023-05-09
Title
Easy Hide Login < 1.0.9 - Arbitrary settings update via CSRF
Slug
easy-hotel
Published
2025-09-22
Title
Easy Hotel Booking <= 1.8.8 - Contributor+ Stored XSS
Slug
easy-hotel
Published
2026-01-29
Title
Easy Hotel Booking <= 1.8.4 - Missing Authorization
Slug
easy-image-collage
Published
2024-06-27
Title
Easy Image Collage < 1.13.6 - Missing Authorization to Authenticated (Contributor+) Data Clearance
Slug
easy-image-display
Published
2025-03-11
Title
Easy Image Display <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-image-gallery
Published
2025-07-02
Title
prettyPhoto JavaScript Library <= 3.1.6 - Contributor+ Stored XSS
Slug
easy-image-gallery
Published
2026-03-20
Title
Easy Image Gallery <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Shortcode Post Meta
Slug
easy-invoice
Published
2025-12-15
Title
Easy Invoice < 2.1.5 - Authenticated (Administrator+) Local File Inclusion
Slug
easy-invoice
Published
2025-10-29
Title
Easy Invoice < 2.1.0 - Unauthenticated Stored Cross-Site Scripting
Slug
easy-jump-links-menus
Published
2025-12-04
Title
Easy Jump Links Menus <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
easy-justified-gallery
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
easy-language-switcher
Published
2024-12-17
Title
Easy Language Switcher <= 1.0 - Reflected Cross-Site Scripting
Slug
easy-liveblogs
Published
2024-11-22
Title
Easy Liveblogs < 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-load-more
Published
2024-09-30
Title
Easy Load More <= 1.0.3 - Reflected Cross-Site Scripting
Slug
easy-login-styler
Published
2024-04-05
Title
Easy Login Styler – White Label Admin Login Page for WordPress <= 1.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
easy-login-woocommerce
Published
2020-05-14
Title
Login/Signup Popup < 1.5 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
easy-login-woocommerce
Published
2021-11-17
Title
Login/Signup Popup < 2.2 - Reflected Cross-Site Scripting
Slug
easy-login-woocommerce
Published
2022-01-13
Title
XootiX Plugins - Various Versions CSRF to Arbitrary Options Update
Slug
easy-login-woocommerce
Published
2023-07-03
Title
Login/Signup Popup < 2.4 - Settings Reset via CSRF
Slug
easy-login-woocommerce
Published
2024-06-05
Title
XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update
Slug
easy-login-woocommerce
Published
2024-06-05
Title
Login/Signup Popup ( Inline Form + Woocommerce ) 2.7.1 - 2.7.2 - Missing Authorization to Arbitrary Options Exposure