WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-e-commerce
Published
2015-02-09
Title
WP eCommerce <= 3.8.6 - SQL Injection
Slug
wp-e-commerce
Published
2014-10-05
Title
WP eCommerce <= 3.8.7.5 - Unspecified SQL Injection
Slug
wp-e-commerce
Published
2014-11-01
Title
WP eCommerce <= 3.8.14.3 - Authorisation Bypass
Slug
wp-e-commerce
Published
2015-04-20
Title
WP eCommerce <= 3.9.2 - Reflected Cross-Site Scripting (XSS)
Slug
wp-e-commerce
Published
2016-11-12
Title
WP eCommerce <= 3.11.3 - SQL Injection in sessionid
Slug
wp-e-commerce
Published
2024-02-27
Title
WP eCommerce <= 3.15.1 - Unauthenticated SQL Injection
Slug
wp-e-commerce
Published
2024-02-27
Title
WP eCommerce <= 3.15.1 - Missing Authorization to Unauthenticated Arbitrary Post Creation
Slug
wp-e-commerce
Published
2026-01-21
Title
WP eCommerce <= 3.15.1 - Unauthenticated PHP Object Injection
Slug
wp-e-commerce
Published
2026-02-13
Title
WP eCommerce <= 3.15.1 - Coupon Deletion via CSRF
Slug
wp-e-commerce-predictive-search
Published
2014-08-01
Title
WP e-Commerce Predictive Search - "rs" Cross-Site Scripting
Slug
wp-e-commerce-style-email
Published
2024-11-18
Title
WP e-Commerce Style Email <= 0.6.2 - Reflected Cross-Site Scripting
Slug
wp-e-commerce-style-email
Published
2025-03-24
Title
WP e-Commerce Style Email <= 0.6.2 - Cross-Site Request Forgery to Remote Code Execution
Slug
wp-e-customers
Published
2025-02-20
Title
WP E Customers <= 0.0.1 - Reflected XSS
Slug
wp-eMember
Published
2024-05-14
Title
WP eMember < 10.3.9 - Reflected XSS
Slug
wp-eMember
Published
2024-05-14
Title
WP eMember < 10.3.9 - Reflected Cross-Site Scripting
Slug
wp-eMember
Published
2024-06-22
Title
WP eMember < 10.6.6 - Admin+ Arbitrary File Upload
Slug
wp-eMember
Published
2024-06-22
Title
WP eMember < 10.6.6 - Reflected XSS
Slug
wp-eMember
Published
2024-06-22
Title
WP eMember < 10.6.7 - Unauthenticated Stored XSS via Member Registration
Slug
wp-eMember
Published
2024-06-22
Title
WP eMember < 10.6.6 - Reflected XSS
Slug
wp-eMember
Published
2024-06-22
Title
WP eMember < 10.6.7 - Reflected XSS
Slug
wp-eMember
Published
2024-06-22
Title
WP eMember < 10.6.7 - Reflected XSS via Member Edit
Slug
wp-eMember
Published
2024-06-22
Title
WP eMember < 10.6.6 - Stored XSS in Blacklist via CSRF
Slug
wp-eMember
Published
2024-06-22
Title
WP eMember < 10.6.6 - Bulk Delete via CSRF
Slug
wp-eMember
Published
2024-07-15
Title
WP eMember <= v10.7.0 - Stored XSS via CSRF
Slug
wp-eMember
Published
2026-03-02
Title
Wp EMember <= 10.2.2 - Reflected Cross-Site Scripting