WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-tiktok-feed
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-timer
Published
2025-09-03
Title
Easy Timer < 4.2.2 - Authenticated (Editor+) Remote Code Execution via Shortcode
Slug
easy-tweet-embed
Published
2025-01-16
Title
Easy Tweet Embed <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-twitter-feeds
Published
2021-09-20
Title
Easy Twitter Feed < 1.2 - Contributor+ Stored Cross-Site Scripting
Slug
easy-twitter-feeds
Published
2024-11-21
Title
Easy Twitter Feed – Twitter feeds plugin for WP <= 1.2.6 - Authenticated (Contributor+) Post Exposure
Slug
easy-tynt
Published
2025-01-16
Title
Easy Tynt <= 0.2.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
easy-under-construction
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-under-construction
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-upload-files-during-checkout
Published
2025-11-03
Title
Easy Upload Files During Checkout < 2.9.9 - Unauthenticated Arbitrary JavaScript File Upload
Slug
easy-upload-files-during-checkout
Published
2025-12-31
Title
Easy Upload Files During Checkout < 3.0.1 - Missing Authorization
Slug
easy-video-player
Published
2022-11-22
Title
Easy Video Player < 1.2.2.3 - Contributor+ Stored XSS
Slug
easy-video-player
Published
2023-12-27
Title
Easy Video Player < 1.2.2.11 - Contributor+ Stored XSS
Slug
easy-voice-mail
Published
2026-02-13
Title
Easy Voice Mail <= 1.2.5 - Unauthenticated Stored Cross-Site Scripting via 'message'
Slug
easy-watermark
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
easy-watermark
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-waveform-player
Published
2024-12-17
Title
Easy Waveform Player < 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-woocommerce-customizer
Published
2025-09-08
Title
Easy Woocommerce Customizer <= 1.0.2 - Reflected Cross-Site Scripting
Slug
easy-wp-cleaner
Published
2023-09-05
Title
Easy WP Cleaner < 2.0 - Data Deletion via CSRF
Slug
easy-wp-cookie-popup
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-wp-cookie-popup
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-wp-optimizer
Published
2025-04-04
Title
Easy WP Optimizer <= 1.1.0 - Missing Authorization
Slug
easy-wp-smtp
Published
2019-03-17
Title
Easy WP SMTP <= 1.3.9 - Unauthenticated Arbitrary wp_options Import
Slug
easy-wp-smtp
Published
2017-04-14
Title
Easy WP Smtp < 1.2.5 - XSS
Slug
easy-wp-smtp
Published
2020-12-07
Title
Easy WP SMTP < 1.4.3 - Debug Log Disclosure
Slug
easy-wp-smtp
Published
2022-10-10
Title
Easy WP SMTP < 1.5.0 - Admin+ PHP Objection Injection