WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ean-for-woocommerce
Published
2025-05-19
Title
EAN for WooCommerce < 5.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
earnware-connect
Published
2025-08-15
Title
Earnware Connect < 1.0.75 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easily-generate-rest-api-url
Published
2022-04-13
Title
Easily Generate Rest API Url <= 1.0.0 - Admin+ Stored Cross-Site Scripting
Slug
easing-slider
Published
2015-02-11
Title
Easing Slider <= 2.2.0.6 - 2 x Cross-Site Scripting (XSS)
Slug
easy-accordion-block
Published
2024-11-01
Title
Easy Accordion Gutenberg Block < 1.2.5 - Missing Authorization
Slug
easy-accordion-free
Published
2021-09-10
Title
Easy Accordion < 2.0.22 - Admin+ Stored Cross-Site Scripting
Slug
easy-accordion-free
Published
2022-12-23
Title
Easy Accordion < 2.2.0 - Contributor+ Stored XSS
Slug
easy-accordion-free
Published
2024-03-08
Title
Easy Accordion – Best Accordion FAQ Plugin for WordPress < 2.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-ad-manager
Published
2023-04-19
Title
Easy Ad Manager <= 1.0.0 - Admin+ Stored XSS
Slug
easy-addons-for-elementor
Published
2024-10-18
Title
Easy Addons for Elementor <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-admin-menu
Published
2023-08-30
Title
Easy Admin Menu <= 1.3 - Admin+ Stored XSS
Slug
easy-adsense-lite
Published
2014-08-01
Title
Easy AdSense Lite 6.06 - Setting Manipulation CSRF
Slug
easy-affiliate-links
Published
2023-01-24
Title
Easy Affiliate Links < 3.7.1 - Contributor+ Stored XSS
Slug
easy-affiliate-links
Published
2024-05-07
Title
Easy Affiliate Links < 3.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-affiliate-links
Published
2024-06-27
Title
Easy Affiliate Links < 3.7.4 - Missing Authorization to Authenticated (Subscriber+) Settings Reset
Slug
easy-age-verify
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-age-verify
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-age-verify
Published
2024-06-27
Title
Easy Age Verify < 1.8.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
easy-amazon-product-information
Published
2025-02-13
Title
Easy Amazon Product Information <= 4.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
easy-appointments
Published
2017-10-16
Title
Easy Appointments < 1.12.0 - Cross-Site Scripting (XSS)
Slug
easy-appointments
Published
2022-12-27
Title
Easy Appointments < 3.11.2 - Contributor+ Stored XSS in Shortcode
Slug
easy-appointments
Published
2023-05-05
Title
Easy Appointments < 3.11.10 - Cross-Site Request Forgery
Slug
easy-appointments
Published
2024-03-28
Title
Easy Appointments < 3.11.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-appointments
Published
2024-03-28
Title
Easy Appointments < 3.11.19 - Insufficient Authorization
Slug
easy-appointments
Published
2025-09-09
Title
Easy Appointments < 3.12.14.1 - Unauthenticated Arbitrary Shortcode Execution