WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-sticky-sidebar
Published
2023-10-25
Title
WordPress CTA < 1.5.9 - Unauthenticated AJAX Actions Call
Slug
easy-sticky-sidebar
Published
2025-06-27
Title
WordPress CTA < 1.7.1 - Cross-Site Request Forgery
Slug
easy-sticky-sidebar
Published
2025-08-01
Title
WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons < 1.7.1 - Missing Authorization to Unauthenticated Sticky Status Update
Slug
easy-sticky-sidebar
Published
2026-03-03
Title
WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales < 2.1.3 - Missing Authorization
Slug
easy-sticky-sidebar
Published
2026-07-10
Title
WP CTA < 2.3.0 - Unauthenticated Time-Based Blind SQL Injection via 'fildname' Parameter
Slug
easy-stripe
Published
2025-07-03
Title
Easy Stripe < 1.2 - Unauthenticated Arbitrary Function Call
Slug
easy-student-results
Published
2022-07-19
Title
Easy Student Results <= 2.2.8 - Reflected Cross-Site Scripting
Slug
easy-student-results
Published
2022-07-19
Title
Easy Student Results <= 2.2.8 - Sensitive Information Disclosure via REST API
Slug
easy-svg
Published
2022-06-01
Title
Easy SVG Support < 3.3.0 - Author+ Stored Cross Site Scripting via SVG
Slug
easy-svg
Published
2024-11-07
Title
Easy SVG Support < 3.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
easy-svg
Published
2026-02-18
Title
Easy SVG Support < 4.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
easy-svg-image-allow
Published
2024-01-03
Title
Easy SVG Allow <= 1.0 - Author+ Stored XSS via SVG
Slug
easy-svg-upload
Published
2024-10-30
Title
Easy SVG Upload <= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
easy-table
Published
2015-08-10
Title
Easy Table < 1.5.3 - Stored Cross-Site Scripting via CSRF
Slug
easy-table
Published
2017-02-14
Title
Easy Table < 1.7 - Admin+ Stored Cross-Site Scripting
Slug
easy-table-booking
Published
2024-04-29
Title
Easy Restaurant Table Booking <= 1.0.0 - Cross-Site Request Forgery
Slug
easy-table-of-contents
Published
2024-06-05
Title
Easy Table of Contents < 2.0.66 - Admin+ Stored XSS
Slug
easy-table-of-contents
Published
2024-06-18
Title
Easy Table of Contents < 2.0.67 - Editor+ Stored XSS
Slug
easy-table-of-contents
Published
2024-07-16
Title
easy-table-of-contents < 2.0.68 - Editor+ Stored XSS
Slug
easy-table-of-contents
Published
2026-02-18
Title
Easy Table of Contents < 2.0.79 - Contributor+ Stored XSS
Slug
easy-table-of-contents
Published
2026-02-11
Title
Easy Table of Contents < 2.0.81 - Cross-Site Request Forgery
Slug
easy-taxonomy-images
Published
2025-06-18
Title
Easy Taxonomy Images <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting
Slug
easy-team-manager
Published
2017-05-31
Title
Easy Team Manager 1.3.2 - Authenticated Blind SQL Injection
Slug
easy-testimonial-manager
Published
2021-07-23
Title
Easy Testimonial Manager <= 1.2.0 - Authenticated SQL Injection
Slug
easy-testimonial-rotator
Published
2023-03-02
Title
Easy Testimonial Slider and Form < 1.0.16 - Reflected Cross-Site Scripting