WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-smooth-scroll-links
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-smooth-scroll-links
Published
2022-03-21
Title
Easy Smooth Scroll Links < 2.23.1 - Admin+ Stored Cross-Site Scripting
Slug
easy-smooth-scroll-links
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-social-icons
Published
2015-02-19
Title
Easy Social Icons <= 1.2.2 - Stored XSS & CSRF
Slug
easy-social-icons
Published
2015-07-22
Title
Easy Social Icons < 1.2.4 - Authenticated SQL Injection
Slug
easy-social-icons
Published
2021-08-30
Title
Easy Social Icons < 3.0.9 - Reflected Cross-Site Scripting
Slug
easy-social-icons
Published
2021-09-02
Title
Easy Social Icons < 3.1.3 - Reflected Cross-Site Scripting
Slug
easy-social-icons
Published
2022-03-15
Title
Easy Social Icons < 3.2.0 - Admin+ Stored Cross-Site Scripting
Slug
easy-social-icons
Published
2022-03-21
Title
Easy Social Icons < 3.2.1 - Unauthenticated Arbitrary Icon Deletion
Slug
easy-social-icons
Published
2022-03-08
Title
Easy Social Icons < 3.1.4 - Admin+ SQL Injection
Slug
easy-social-icons
Published
2022-03-21
Title
Easy Social Icons < 3.2.1 - Admin+ Stored Cross-Site Scripting in add icon
Slug
easy-social-icons
Published
2023-11-07
Title
Easy Social Icons < 3.2.5 - Missing Authorization via cnss_save_ajax_order
Slug
easy-social-icons
Published
2023-11-23
Title
Easy Social Icons < 3.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
easy-social-media
Published
2025-06-18
Title
Easy Social <= 1.3 - Reflected Cross-Site Scripting
Slug
easy-social-share-buttons
Published
2024-10-09
Title
Easy Social Share Buttons <= 1.4.5 - Reflected Cross-Site Scripting
Slug
easy-social-share-buttons-for-wordpress
Published
2016-04-21
Title
Easy Social Share Buttons < 3.5 - Cross-Site Scripting (XSS)
Slug
easy-social-share-buttons3
Published
2024-03-25
Title
Easy Social Share Buttons < 9.5 - Reflected Cross-Site Scripting
Slug
easy-social-share-buttons3
Published
2024-04-05
Title
Easy Social Share Buttons < 9.5 - Missing Authorization
Slug
easy-social-share-buttons3
Published
2024-04-05
Title
Easy Social Share Buttons < 9.5 - Authenticated (Subscriber+) Local File Inclusion
Slug
easy-social-share-buttons3
Published
2025-10-26
Title
Easy Social Share Buttons < 10.7.1 - Unauthenticated Stored Cross-Site Scripting
Slug
easy-social-sharebar
Published
2024-11-08
Title
Easy Social Sharebar <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-sticky-sidebar
Published
2023-10-25
Title
WordPress CTA < 1.5.9 - Unauthenticated AJAX Actions Call
Slug
easy-sticky-sidebar
Published
2025-06-27
Title
WordPress CTA < 1.7.1 - Cross-Site Request Forgery
Slug
easy-sticky-sidebar
Published
2025-08-01
Title
WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons < 1.7.1 - Missing Authorization to Unauthenticated Sticky Status Update
Slug
easy-sticky-sidebar
Published
2026-03-03
Title
WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales < 2.1.3 - Missing Authorization