WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-pricing-tables
Published
2024-10-29
Title
Pricing Tables WordPress Plugin – Easy Pricing Tables < 3.2.6 - Reflected Cross-Site Scripting
Slug
easy-pricing-tables
Published
2024-11-05
Title
Pricing Tables WordPress Plugin – Easy Pricing Tables < 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via fontFamily Attribute
Slug
easy-prism-syntax-highlighter
Published
2026-05-26
Title
Easy Prism Syntax Highlighter <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
easy-property-listings
Published
2019-08-17
Title
Easy Property Listings < 3.4 - Cross-Site Scripting (XSS)
Slug
easy-property-listings
Published
2020-02-18
Title
Easy Property Listings < 3.4 - Cross-Site Request Forgery (CSRF)
Slug
easy-property-listings
Published
2024-03-21
Title
Easy Property Listings < 3.5.3 - Authenticated(Contributor+) SQL Injection via Shortcode
Slug
easy-property-listings
Published
2024-04-22
Title
Easy Property Listings < 3.5.4 - Missing Authorization via epl_update_listing_coordinates()
Slug
easy-property-listings
Published
2024-08-22
Title
Easy Property Listings < 3.5.4 - Arbitrary Contact Deletion via CSRF
Slug
easy-property-listings
Published
2024-02-29
Title
Easy Property Listings <= 3.5.3 - Admin+ Stored XSS
Slug
easy-property-listings
Published
2025-12-12
Title
Easy Property Listings < 3.5.23 - Missing Authorization
Slug
easy-property-listings
Published
2026-01-22
Title
Easy Property Listings < 3.5.21 - Missing Authorization
Slug
easy-property-listings-xml-csv-import
Published
2025-12-30
Title
Import into Easy Property Listings < 2.2.2 - Cross-Site Request Forgery
Slug
easy-query
Published
2025-04-04
Title
Easy Query – WP Query Builder <= 2.0.4 - Authenticated (Administrator+) SQL Injection
Slug
easy-quotes
Published
2025-02-23
Title
Easy Quotes < 1.2.3 - Unauthenticated SQL Injection
Slug
easy-quotes
Published
2025-09-22
Title
Easy Quotes < 1.2.5 - Missing Authorization
Slug
easy-real-estate
Published
2025-01-20
Title
WordPress Easy Real Estate Plugin < 2.3.0 - Privilege Escalation
Slug
easy-real-estate
Published
2025-01-20
Title
Easy Real Estate < 2.3.0 - Unauthenticated Privilege Escalation
Slug
easy-redirect-manager
Published
2019-01-14
Title
easy-redirect-manager 2.18.18 - Cross-Site Scripting (XSS)
Slug
easy-registration-forms
Published
2020-11-20
Title
Easy Registration Forms <= 2.0.6 - CSV Injection
Slug
easy-registration-forms
Published
2021-11-18
Title
Easy Registration Forms <= 2.1.1 - CSRF to Stored Cross-Site Scripting
Slug
easy-registration-forms
Published
2023-09-22
Title
Easy Registration Forms <= 2.1.1 - Subscriber+ Information Disclosure via Shortcode
Slug
easy-related-posts
Published
2025-02-03
Title
Easy Related Posts <= 2.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
easy-replace
Published
2024-12-06
Title
Easy Replace <= 1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
easy-replace-image
Published
2025-05-07
Title
Easy Replace Image < 3.5.1 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
easy-replace-image
Published
2026-01-27
Title
Easy Replace Image < 3.5.3 - Missing Authorization to Authenticated (Contributor+) Arbitrary Attachment Replacement