WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-mls-listings-import
Published
2025-02-17
Title
Easy MLS Listings Import < 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-modal
Published
2017-08-07
Title
Easy Modal < 2.1.0 - Authenticated SQL Injection
Slug
easy-modal
Published
2026-01-11
Title
Easy Modal <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-newsletter-signups
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-newsletter-signups
Published
2023-11-13
Title
Easy Newsletter Signups <= 1.0.4 - Admin+ SQLi
Slug
easy-newsletter-signups
Published
2023-09-01
Title
Easy Newsletter Signups <= 1.0.4 - Missing Authorization
Slug
easy-notify-lite
Published
2024-05-14
Title
Popup Builder < 1.1.30 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
easy-notify-lite
Published
2024-05-27
Title
Easy Notify Lite < 1.1.33 - Contributor+ Stored XSS
Slug
easy-notify-lite
Published
2025-02-22
Title
Popup Builder < 1.1.35 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-notify-lite
Published
2025-04-22
Title
Popup Builder < 1.1.37 - Authenticated (Subscriber+) Local File Inclusion
Slug
easy-notify-lite
Published
2025-12-12
Title
Popup Builder < 1.1.39 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Reset
Slug
easy-order-view
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-org-chart
Published
2022-09-01
Title
Easy Org Chart <= 3.1 - Contributor+ Stored Cross-Site Scripting
Slug
easy-page-transition
Published
2025-03-24
Title
Easy Page Transition <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
easy-panorama
Published
2023-02-15
Title
Easy Panorama < 1.1.5 - Admin+ Stored XSS
Slug
easy-paypal-donation
Published
2021-10-04
Title
Paypal Donation < 1.3.1 - CSRF to Arbitrary Post Deletion
Slug
easy-paypal-donation
Published
2021-10-18
Title
Paypal Donation < 1.3.2 - Admin+ Stored Cross-Site Scripting
Slug
easy-paypal-donation
Published
2021-10-04
Title
Paypal Donation < 1.3.1 - CSRF to Stored Cross-Site Scripting
Slug
easy-paypal-donation
Published
2021-10-11
Title
Multiple Plugins from WPPlugin - Reflected Cross-Site Scripting via page Parameter
Slug
easy-paypal-donation
Published
2021-12-09
Title
Accept Donations with PayPal < 1.3.4 - Arbitrary Post Deletion via CSRF
Slug
easy-paypal-donation
Published
2025-02-22
Title
Accept Donations with PayPal & Stripe < 1.4.5 - Reflected Cross-Site Scripting
Slug
easy-paypal-donation
Published
2025-05-07
Title
Accept Donations with PayPal < 1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
easy-paypal-donation
Published
2025-12-25
Title
Accept Donations with PayPal < 1.5.3 - Unauthenticated Open Redirect
Slug
easy-paypal-events-tickets
Published
2021-10-11
Title
Multiple Plugins from WPPlugin - Reflected Cross-Site Scripting via page Parameter
Slug
easy-paypal-events-tickets
Published
2024-09-24
Title
Easy PayPal Events < 1.2.2 - Cross-Site Request Forgery to Arbitrary Post Deletion