WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
e-boekhoudennl-connector
Published
2025-08-21
Title
e-Boekhouden.nl <= 1.9.3 - Reflected Cross-Site Scripting
Slug
e-mailit
Published
2025-09-26
Title
WeShare Buttons <= 13.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
e-namad-shamed-logo-manager
Published
2025-09-22
Title
E-namad & Shamed Logo Manager <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
e-search
Published
2016-04-13
Title
e-search <= 1.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
e-shops-cart2
Published
2024-11-01
Title
e-shops <= 1.0.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Slug
e-shops-cart2
Published
2025-12-30
Title
e-shops <= 1.0.4 - Reflected Cross-Site Scripting
Slug
e-signature
Published
2021-01-19
Title
e-signature < 1.5.6.8 - Unauthenticated Arbitrary File Upload leading to RCE
Slug
e-unlocked-student-result
Published
2022-07-19
Title
E Unlocked - Student Result <= 1.0.4 - Arbitrary File Upload via CSRF
Slug
e-xact-hosted-payment
Published
2025-12-23
Title
e-xact-hosted-payment <= 2.0 - Unauthenticated Arbitrary File Deletion
Slug
e2pdf
Published
2022-02-09
Title
E2Pdf < 1.16.45 - Admin+ Stored Cross-Site Scripting (XSS)
Slug
e2pdf
Published
2023-10-09
Title
E2Pdf < 1.20.20 - Admin+ Stored Cross-Site Scriping
Slug
e2pdf
Published
2023-10-17
Title
E2Pdf < 1.20.19 - Authenticated (Administrator+) PHP Object Injection
Slug
e2pdf
Published
2023-12-13
Title
E2Pdf < 1.20.26 - Admin+ Arbitrary File Upload
Slug
e2pdf
Published
2023-12-21
Title
E2Pdf < 1.20.24 - Authenticated(Administrator+) SQL Injection
Slug
e2pdf
Published
2024-04-10
Title
e2pdf < 1.23.00 - Cross-Site Request Forgery
Slug
e2pdf
Published
2024-06-28
Title
E2Pdf – Export To Pdf Tool for WordPress < 1.23.00 - Missing Authorization
Slug
e2pdf
Published
2024-08-16
Title
e2pdf < 1.25.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
e2pdf
Published
2025-10-16
Title
e2pdf < 1.28.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
eagle-booking
Published
2025-11-18
Title
Eagle Booking <= 1.3.4.3 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
eagle-booking
Published
2025-11-18
Title
Eagle Booking <= 1.3.4.3 - Missing Authorization to Authenticated (Subscriber+) Settings Change
Slug
ean-for-woocommerce
Published
2023-01-11
Title
EAN for WooCommerce < 4.4.3 - Contributor+ Stored XSS
Slug
ean-for-woocommerce
Published
2024-04-17
Title
EAN for WooCommerce < 4.9.3 - Insecure Direct Object Reference to Sensitve Information Exposure via Shortcode
Slug
ean-for-woocommerce
Published
2024-04-17
Title
EAN for WooCommerce < 4.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via alg_wc_ean_product_meta Shortcode
Slug
ean-for-woocommerce
Published
2024-05-03
Title
EAN for WooCommerce < 4.9.0 - Authenticated (Shop Manager+) Arbitrary Options Update
Slug
ean-for-woocommerce
Published
2025-02-03
Title
EAN for WooCommerce < 5.4.0 - Missing Authorization