WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-event-solution
Published
2025-05-07
Title
Event Manager, Events Calendar, Tickets, Registrations – Eventin < 4.0.27 - Unauthenticated Arbitrary File Read
Slug
wp-event-solution
Published
2025-05-07
Title
Eventin < 4.0.27 - Missing Authorization to Unauthenticated Privilege Escalation
Slug
wp-event-solution
Published
2025-06-23
Title
Eventin < 4.0.29 - Reflected Cross-Site Scripting
Slug
wp-event-solution
Published
2025-08-08
Title
Eventin < 4.0.35 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover
Slug
wp-event-solution
Published
2025-08-13
Title
Eventin < 4.0.32 - Authenticated (Contributor+) PHP Object Injection
Slug
wp-event-solution
Published
2025-08-22
Title
Event Manager, Events Calendar, Booking, Registrations and Tickets – Eventin < 4.0.38 - Unauthenticated Server-Side Request Forgery
Slug
wp-event-solution
Published
2026-01-08
Title
Eventin – Event Manager, Event Booking, Calendar, Tickets and Registration Plugin (AI Powered) < 4.0.52 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'post_settings'
Slug
wp-eventpress
Published
2024-11-08
Title
EventPress <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-events
Published
2017-11-03
Title
Events <= 2.3.4 - Authenticated SQL Injection
Slug
wp-events-manager
Published
2024-08-30
Title
WP Events Manager < 2.2.0 - Authenticated (Subscriber+) Time-Based SQL Injection
Slug
wp-events-manager
Published
2025-09-22
Title
WP Events Manager < 2.2.2 - Missing Authorization
Slug
wp-ever-accounting
Published
2025-04-16
Title
Ever Accounting < 2.1.6 - Cross-Site Request Forgery
Slug
wp-expand-tabs-free
Published
2023-01-06
Title
WP Tabs < 2.1.17 - Contributor+ Stored XSS
Slug
wp-expand-tabs-free
Published
2023-01-06
Title
WP Tabs < 2.1.15 - Multiple CSRF
Slug
wp-expand-tabs-free
Published
2023-12-28
Title
WP Tabs < 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-expand-tabs-free
Published
2025-03-03
Title
WP Tabs < 2.2.7 - Admin+ Stored XSS
Slug
wp-expand-tabs-free
Published
2025-05-16
Title
WP Tabs < 2.2.13 - Admin+ PHP Object Injection
Slug
wp-experiments-free
Published
2022-03-07
Title
Title Experiments Free < 9.0.1 - Unauthenticated SQLi
Slug
wp-experiments-free
Published
2025-01-07
Title
Title Experiments Free <= 9.0.4 - Cross-Site Request Forgery
Slug
wp-experiments-free
Published
2025-01-07
Title
Title Experiments Free <= 9.0.4 - Missing Authorization
Slug
wp-expert-agent-xml-feed
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-explorer-gallery
Published
2014-08-01
Title
wp-explorer-gallery - Arbitrary File Upload
Slug
wp-export-categories-taxonomies
Published
2025-12-31
Title
Export Categories & Taxonomies <= 1.0.3 - Missing Authorization
Slug
wp-express-checkout
Published
2023-03-17
Title
WP Express Checkout < 2.2.9 - Admin+ Stored XSS
Slug
wp-express-checkout
Published
2024-03-29
Title
WP Express Checkout (Accept PayPal Payments) < 2.3.8 - Unauthenticated Price Manipulation