WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-table-of-contents
Published
2024-07-16
Title
easy-table-of-contents < 2.0.68 - Editor+ Stored XSS
Slug
easy-table-of-contents
Published
2026-02-18
Title
Easy Table of Contents < 2.0.79 - Contributor+ Stored XSS
Slug
easy-table-of-contents
Published
2026-02-11
Title
Easy Table of Contents < 2.0.81 - Cross-Site Request Forgery
Slug
easy-taxonomy-images
Published
2025-06-18
Title
Easy Taxonomy Images <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting
Slug
easy-team-manager
Published
2017-05-31
Title
Easy Team Manager 1.3.2 - Authenticated Blind SQL Injection
Slug
easy-testimonial-manager
Published
2021-07-23
Title
Easy Testimonial Manager <= 1.2.0 - Authenticated SQL Injection
Slug
easy-testimonial-rotator
Published
2023-03-02
Title
Easy Testimonial Slider and Form < 1.0.16 - Reflected Cross-Site Scripting
Slug
easy-testimonial-rotator
Published
2023-10-12
Title
Easy Testimonial Slider and Form < 1.0.19 - Admin+ Stored XSS
Slug
easy-testimonial-rotator
Published
2025-10-28
Title
Easy Testimonial Slider and Form < 1.0.3 - Authenticated (Admin+) SQL injection
Slug
easy-testimonials
Published
2016-07-31
Title
Easy Testimonials < 1.37 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
easy-testimonials
Published
2020-05-13
Title
Easy Testimonials < 3.6 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
easy-testimonials
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
easy-testimonials
Published
2022-06-14
Title
Easy Testimonials < 3.9 - Reflected Cross-Site Scripting
Slug
easy-testimonials
Published
2023-01-10
Title
Easy Testimonials < 3.9.3 - Contributor+ Stored XSS
Slug
easy-testimonials
Published
2020-09-16
Title
Easy Testimonials < 3.7 - Cross-Site Request Forgery
Slug
easy-testimonials
Published
2024-07-19
Title
Easy Testimonials <= 3.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
easy-textillate
Published
2024-03-25
Title
Easy Textillate < 2.02 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
easy-textillate
Published
2024-04-15
Title
Easy Textillate <= 2.02 - Authenticated(Contributor+) Stored Cross-Site Scripting
Slug
easy-theme-options
Published
2025-12-12
Title
Easy Theme Options <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Import
Slug
easy-theme-options
Published
2026-01-20
Title
Easy Theme Options <= 1.0 - Reflected Cross-Site Scripting
Slug
easy-tiktok-feed
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-tiktok-feed
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-timer
Published
2025-09-03
Title
Easy Timer < 4.2.2 - Authenticated (Editor+) Remote Code Execution via Shortcode
Slug
easy-tweet-embed
Published
2025-01-16
Title
Easy Tweet Embed <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-twitter-feeds
Published
2021-09-20
Title
Easy Twitter Feed < 1.2 - Contributor+ Stored Cross-Site Scripting