WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-registration-forms
Published
2021-11-18
Title
Easy Registration Forms <= 2.1.1 - CSRF to Stored Cross-Site Scripting
Slug
easy-registration-forms
Published
2023-09-22
Title
Easy Registration Forms <= 2.1.1 - Subscriber+ Information Disclosure via Shortcode
Slug
easy-related-posts
Published
2025-02-03
Title
Easy Related Posts <= 2.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
easy-replace
Published
2024-12-06
Title
Easy Replace <= 1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
easy-replace-image
Published
2025-05-07
Title
Easy Replace Image < 3.5.1 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
easy-replace-image
Published
2026-01-27
Title
Easy Replace Image < 3.5.3 - Missing Authorization to Authenticated (Contributor+) Arbitrary Attachment Replacement
Slug
easy-schema-structured-data-rich-snippets
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-school-registration
Published
2025-01-16
Title
Easy School Registration <= 3.9.8 - Reflected Cross-Site Scripting
Slug
easy-set-favicon
Published
2024-04-25
Title
Easy Set Favicon <= 1.1 - Reflected Cross-Site Scripting
Slug
easy-settings-for-learndash
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-settings-for-learndash
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-shortcode-buttons
Published
2025-01-16
Title
Easy Shortcode Buttons <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-side-tab-cta
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
easy-sign-up
Published
2023-04-06
Title
Easy Sign Up <= 3.4.1 - Contributor+ Stored XSS
Slug
easy-site-importer
Published
2024-12-14
Title
Easy Site Importer <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Settings Change
Slug
easy-slider-revolution
Published
2023-04-21
Title
Easy Slider Revolution < 1.1.0 - Author+ Stored XSS
Slug
easy-slideshow
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-slideshow
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-smooth-scroll-links
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-smooth-scroll-links
Published
2022-03-21
Title
Easy Smooth Scroll Links < 2.23.1 - Admin+ Stored Cross-Site Scripting
Slug
easy-smooth-scroll-links
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-social-icons
Published
2015-02-19
Title
Easy Social Icons <= 1.2.2 - Stored XSS & CSRF
Slug
easy-social-icons
Published
2015-07-22
Title
Easy Social Icons < 1.2.4 - Authenticated SQL Injection
Slug
easy-social-icons
Published
2021-08-30
Title
Easy Social Icons < 3.0.9 - Reflected Cross-Site Scripting
Slug
easy-social-icons
Published
2021-09-02
Title
Easy Social Icons < 3.1.3 - Reflected Cross-Site Scripting