WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-post-to-post-links
Published
2025-01-16
Title
Post-to-Post Links <= 4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
easy-post-types
Published
2014-05-28
Title
Easy Post Types < 1.4.4 - XSS
Slug
easy-post-types
Published
2024-10-17
Title
WP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) PHP Object Injection
Slug
easy-post-types
Published
2024-10-17
Title
WP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions
Slug
easy-post-types
Published
2024-10-17
Title
WP Easy Post Types <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta
Slug
easy-post-views-count
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-prayer
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-prayer
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-preloader
Published
2021-05-24
Title
Easy Preloader <= 1.0.0 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
easy-pricing-table-wp
Published
2025-09-22
Title
Easy Pricing Table WP <= 1.1.3 - Authenticated (Contributor+) Local File Inclusion
Slug
easy-pricing-tables
Published
2022-02-01
Title
Easy Pricing Tables < 3.1.3 - Arbitrary Post Removal via CSRF
Slug
easy-pricing-tables
Published
2022-05-31
Title
Easy Pricing Tables < 3.2.1 - Reflected Cross-Site-Scripting
Slug
easy-pricing-tables
Published
2022-05-27
Title
Easy Pricing Tables < 3.1.3 - Author+ Stored Cross-Site Scripting
Slug
easy-pricing-tables
Published
2023-01-04
Title
Pricing Tables WordPress Plugin – Easy Pricing Tables < 3.2.3 - Contributor+ Stored XSS via Shortcode
Slug
easy-pricing-tables
Published
2024-10-29
Title
Pricing Tables WordPress Plugin – Easy Pricing Tables < 3.2.6 - Reflected Cross-Site Scripting
Slug
easy-pricing-tables
Published
2024-11-05
Title
Pricing Tables WordPress Plugin – Easy Pricing Tables < 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via fontFamily Attribute
Slug
easy-property-listings
Published
2019-08-17
Title
Easy Property Listings < 3.4 - Cross-Site Scripting (XSS)
Slug
easy-property-listings
Published
2020-02-18
Title
Easy Property Listings < 3.4 - Cross-Site Request Forgery (CSRF)
Slug
easy-property-listings
Published
2024-03-21
Title
Easy Property Listings < 3.5.3 - Authenticated(Contributor+) SQL Injection via Shortcode
Slug
easy-property-listings
Published
2024-04-22
Title
Easy Property Listings < 3.5.4 - Missing Authorization via epl_update_listing_coordinates()
Slug
easy-property-listings
Published
2024-08-22
Title
Easy Property Listings < 3.5.4 - Arbitrary Contact Deletion via CSRF
Slug
easy-property-listings
Published
2024-02-29
Title
Easy Property Listings <= 3.5.3 - Admin+ Stored XSS
Slug
easy-property-listings
Published
2025-12-12
Title
Easy Property Listings <= 3.5.16 - Missing Authorization
Slug
easy-property-listings
Published
2026-01-22
Title
Easy Property Listings < 3.5.21 - Missing Authorization
Slug
easy-property-listings-xml-csv-import
Published
2025-12-30
Title
Import into Easy Property Listings < 2.2.2 - Cross-Site Request Forgery