WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easyazon
Published
2024-06-05
Title
EasyAzon – Amazon Associates Affiliate Plugin <= 5.1.0 - Reflected Cross-Site Scripting via easyazon-cloaking-locale
Slug
easycommerce
Published
2025-11-10
Title
EasyCommerce – AI-Powered, Blazing-Fast & Beautiful WordPress Ecommerce Plugin 0.9.0-beta2 - 1.8.2 - Unauthenticated Privilege Escalation
Slug
easyevent
Published
2024-04-16
Title
EasyEvent <= 1.0.0 - Admin+ Stored XSS
Slug
easyfonts
Published
2025-04-09
Title
Easyfonts < 1.1.3 - Cross-Site Request Forgery
Slug
easyindex
Published
2025-12-31
Title
EasyIndex <= 1.1.1704 - Cross-Site Request Forgery
Slug
easyjobs
Published
2022-02-03
Title
EasyJobs < 1.4.8 - Reflected Cross-Site Scripting
Slug
easyjobs
Published
2023-12-22
Title
easy.jobs < 2.4.7 - Subscriber+ Arbitrary Settings Update
Slug
easyjobs
Published
2024-08-29
Title
EasyJobs < 2.4.15 - Reflected Cross-Site Scripting
Slug
easylogo
Published
2024-04-11
Title
Easy Logo <= 1.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
easyme-connect
Published
2025-05-07
Title
EasyMe Connect <= 3.0.3 - Cross-Site Request Forgery
Slug
easync-booking
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easync-booking
Published
2022-06-15
Title
eaSYNC < 1.1.16 - Unauthenticated Arbitrary File Upload
Slug
easync-booking
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easync-booking
Published
2023-07-20
Title
eaSYNC < 1.3.12 - Reflected Cross-Site Scripting
Slug
easync-booking
Published
2024-09-10
Title
Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking < 1.3.15 - Subscriber+ PayPal Settings Update
Slug
easync-booking
Published
2025-04-04
Title
eaSYNC < 1.3.21 - Missing Authorization
Slug
easync-booking
Published
2025-05-30
Title
Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking < 1.3.22 - Insecure Direct Object Reference to Sensitive Information Exposure
Slug
easypromos
Published
2025-02-18
Title
Easypromos Plugin < 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
easyrecipe
Published
2023-10-26
Title
EasyRecipe <= 3.5.3251 - Cross-Site Request Forgery
Slug
easyrotator-for-wordpress
Published
2023-11-10
Title
EasyRotator for WordPress <= 1.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
easysnippet
Published
2025-10-14
Title
Rich Snippet Site Report <= 2.0.0105 - Authenticated (Admin+) SQL Injection
Slug
eazy-under-construction
Published
2025-01-14
Title
Eazy Under Construction < 2.0 - Reflected Cross-Site Scripting
Slug
eazydocs
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
eazydocs
Published
2023-11-07
Title
EazyDocs < 2.3.6 - Reflected XSS
Slug
eazydocs
Published
2023-11-20
Title
EazyDocs < 2.3.4 - Subscriber + SQLi