WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
edd-courses
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
edd-download-info
Published
2026-01-06
Title
EDD Download Info <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
edd-google-sheet-connector-pro
Published
2023-04-27
Title
Easy Digital Downloads Google Sheet Connector < 1.6.6 - Access Code Update via CSRF
Slug
edd-recent-purchases
Published
2024-05-27
Title
Easy Digital Downloads – Recent Purchases <= 1.0.2 - Unauthenticated Remote File Inclusion
Slug
edd-tab-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
edd-tab-manager
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
edd-tab-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
edd-venmo
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
edge-gallery
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
edge-gallery
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
edit-comments
Published
2021-07-24
Title
Edit Comments <= 0.3 - Unauthenticated SQL Injection
Slug
edit-comments
Published
2021-07-24
Title
Edit Comments <= 0.3 - Reflected Cross-Site Scripting
Slug
edit-comments-xt
Published
2021-09-09
Title
Edit Comments XT <= 1.0 - Reflected Cross-Site Scripting
Slug
editable-table
Published
2021-10-25
Title
EditableTable <= 0.1.4 - Admin+ Stored Cross-Site Scripting
Slug
editionguard-for-woocommerce-ebook-sales-with-drm
Published
2024-12-18
Title
EditionGuard for WooCommerce – eBook Sales with DRM <= 3.4.2 - Cross-Site Request Forgery to Privilege Escalation
Slug
editionguard-for-woocommerce-ebook-sales-with-drm
Published
2025-01-16
Title
EditionGuard for WooCommerce – eBook Sales with DRM <= 3.4.2 - Reflected Cross-Site Scripting
Slug
editor-custom-color-palette
Published
2024-10-25
Title
Editor Custom Color Palette < 3.3.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
editor-custom-color-palette
Published
2025-09-22
Title
Editor Custom Color Palette <= 3.5.4 - Missing Authorization
Slug
editor-wysiwyg-background-color
Published
2025-04-16
Title
Editor Wysiwyg Background Color <= 1.0 - Missing Authorization
Slug
editorial-calendar
Published
2014-08-01
Title
Editorial Calendar 2.6 - Post Title XSS
Slug
editorial-calendar
Published
2014-08-01
Title
Editorial Calendar 2.6 - Permission Verification Arbitrary Calendar Post Deletion
Slug
editorial-calendar
Published
2014-08-01
Title
Editorial Calendar 2.6 - Post Query Multiple Filter SQL Injection
Slug
editorial-calendar
Published
2022-06-05
Title
Editorial Calendar < 3.8.3 - Contributor+ Stored XSS
Slug
editorial-calendar
Published
2025-12-20
Title
Editorial Calendar < 3.8.9 - Missing Authorization
Slug
editormonkey
Published
2014-08-01
Title
EditorMonkey - (FCKeditor) Arbitrary File Upload