WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-eMember
Published
2024-05-14
Title
WP eMember < 10.3.9 - Reflected Cross-Site Scripting
Slug
wp-eMember
Published
2024-06-22
Title
WP eMember < 10.6.6 - Admin+ Arbitrary File Upload
Slug
wp-eMember
Published
2024-06-22
Title
WP eMember < 10.6.6 - Reflected XSS
Slug
wp-eMember
Published
2024-06-22
Title
WP eMember < 10.6.7 - Unauthenticated Stored XSS via Member Registration
Slug
wp-eMember
Published
2024-06-22
Title
WP eMember < 10.6.6 - Reflected XSS
Slug
wp-eMember
Published
2024-06-22
Title
WP eMember < 10.6.7 - Reflected XSS
Slug
wp-eMember
Published
2024-06-22
Title
WP eMember < 10.6.7 - Reflected XSS via Member Edit
Slug
wp-eMember
Published
2024-06-22
Title
WP eMember < 10.6.6 - Stored XSS in Blacklist via CSRF
Slug
wp-eMember
Published
2024-06-22
Title
WP eMember < 10.6.6 - Bulk Delete via CSRF
Slug
wp-eMember
Published
2024-07-15
Title
WP eMember <= v10.7.0 - Stored XSS via CSRF
Slug
wp-easy-booking
Published
2024-05-24
Title
WP Booking < 2.4.5 - Authenticated Stored Cross-Site Scripting
Slug
wp-easy-contact
Published
2022-06-21
Title
Best Contact Management Software < 3.8 - Admin+ Stored Cross-Site Scripting
Slug
wp-easy-contact
Published
2025-06-03
Title
Simplify Contact Management: WP Easy Contact < 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-easy-contact
Published
2025-08-04
Title
WP Easy Contact < 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter
Slug
wp-easy-contact
Published
2025-08-25
Title
WP Easy Contact < 4.0.2 - Unauthenticated PHP Object Injection
Slug
wp-easy-events
Published
2025-06-25
Title
Event RSVP and Simple Event Management Plugin < 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-easy-faqs
Published
2025-09-10
Title
WP Easy FAQs <= 1.0.5 - Authenticated (Author+) Stored Cross-Site Scripting via WP_EASY_FAQ Shortcode
Slug
wp-easy-gallery
Published
2014-08-01
Title
WP Easy Gallery < 2.7.3 - Cross-Site Request Forgery (CSRF)
Slug
wp-easy-gallery
Published
2014-08-01
Title
WP Easy Gallery 2.7 - admin/overview.php galleryId Parameter SQL Injection
Slug
wp-easy-gallery
Published
2014-08-01
Title
WP Easy Gallery 2.7 - admin/add-images.php Multiple Parameter SQL Injection
Slug
wp-easy-gallery
Published
2014-08-01
Title
WP Easy Gallery 2.7 - Multiple Admin Function CSRF
Slug
wp-easy-gallery
Published
2014-08-01
Title
WP Easy Gallery < 2.7.3 - Cross-Site Scripting (XSS)
Slug
wp-easy-gallery
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
wp-easy-gallery
Published
2016-01-26
Title
WP Easy Gallery <= 4.1.4 - Reflected Cross-Site Scripting (XSS)
Slug
wp-easy-gallery
Published
2024-09-23
Title
WP Easy Gallery – WordPress Gallery Plugin <= 4.8.5 - Missing Authorization to Authenticated (Subscriber+) Gallery Manipulation