WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easyme-connect
Published
2025-05-07
Title
EasyMe Connect <= 3.0.3 - Cross-Site Request Forgery
Slug
easync-booking
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easync-booking
Published
2022-06-15
Title
eaSYNC < 1.1.16 - Unauthenticated Arbitrary File Upload
Slug
easync-booking
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easync-booking
Published
2023-07-20
Title
eaSYNC < 1.3.12 - Reflected Cross-Site Scripting
Slug
easync-booking
Published
2024-09-10
Title
Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking < 1.3.15 - Subscriber+ PayPal Settings Update
Slug
easync-booking
Published
2025-04-04
Title
eaSYNC < 1.3.21 - Missing Authorization
Slug
easync-booking
Published
2025-05-30
Title
Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking < 1.3.22 - Insecure Direct Object Reference to Sensitive Information Exposure
Slug
easypromos
Published
2025-02-18
Title
Easypromos Plugin < 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
easyrecipe
Published
2023-10-26
Title
EasyRecipe <= 3.5.3251 - Cross-Site Request Forgery
Slug
easyrotator-for-wordpress
Published
2023-11-10
Title
EasyRotator for WordPress <= 1.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
easysnippet
Published
2025-10-14
Title
Rich Snippet Site Report <= 2.0.0105 - Authenticated (Admin+) SQL Injection
Slug
eazy-under-construction
Published
2025-01-14
Title
Eazy Under Construction < 2.0 - Reflected Cross-Site Scripting
Slug
eazydocs
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
eazydocs
Published
2023-11-07
Title
EazyDocs < 2.3.6 - Reflected XSS
Slug
eazydocs
Published
2023-11-20
Title
EazyDocs < 2.3.4 - Subscriber + SQLi
Slug
eazydocs
Published
2023-11-07
Title
EazyDocs < 2.3.6 - Unauthenticated OnePage Document Update/Publish
Slug
eazydocs
Published
2023-12-21
Title
EazyDocs < 2.3.6 - Subscriber+ Arbitrary Posts Deletion and Document Management
Slug
eazydocs
Published
2024-01-16
Title
EazyDocs < 2.4.0 - Subscriber+ Arbitrary Posts Deletion and Document Management
Slug
eazydocs
Published
2024-06-11
Title
EazyDocs < 2.5.0 - Admin+ Stored XSS
Slug
eazydocs
Published
2024-07-11
Title
EazyDocs < 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
eazydocs
Published
2024-07-11
Title
EazyDocs < 2.5.1 - Missing Authorization
Slug
eazydocs
Published
2024-12-11
Title
EazyDocs < 2.8.1 - Contributor+ Local File Inclusion
Slug
eazydocs
Published
2025-04-07
Title
EazyDocs < 2.7.2 - Missing Authorization
Slug
ebay-feeds-for-wordpress
Published
2014-04-25
Title
WP eBay Product Feeds < 1.2 - Cross-Site Scripting via rss_url Parameter