WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ecwid-shopping-cart
Published
2023-11-07
Title
Ecwid Ecommerce Shopping Cart < 6.12.4 - Missing Authorization on multiple functions
Slug
ecwid-shopping-cart
Published
2024-03-29
Title
Ecwid Ecommerce Shopping Cart < 6.12.11 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
ecwid-shopping-cart
Published
2025-02-17
Title
Ecwid by Lightspeed Ecommerce Shopping Cart < 6.12.28 - Cross-Site Request Forgery to Send Deactivation Message
Slug
ecwid-shopping-cart
Published
2025-04-04
Title
Ecwid Shopping Cart < 7.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ecwid-shopping-cart
Published
2026-01-19
Title
Ecwid Shopping Cart < 7.0.6 - Missing Authorization
Slug
ecwid-shopping-cart
Published
2026-01-12
Title
Ecwid Shopping Cart < 7.0.7 - Missing Authorization
Slug
ecwid-shopping-cart
Published
2026-02-14
Title
Ecwid by Lightspeed Ecommerce Shopping Cart < 7.0.8 - Subscriber+ Privilege Escalation
Slug
ed2k-link-selector
Published
2014-08-01
Title
ed2k-link-selector <= 1.1.7 - XSS in ZeroClipboard
Slug
edd-cashapp
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
edd-courses
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
edd-courses
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
edd-download-info
Published
2026-01-06
Title
EDD Download Info <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
edd-google-sheet-connector-pro
Published
2023-04-27
Title
Easy Digital Downloads Google Sheet Connector < 1.6.6 - Access Code Update via CSRF
Slug
edd-recent-purchases
Published
2024-05-27
Title
Easy Digital Downloads – Recent Purchases <= 1.0.2 - Unauthenticated Remote File Inclusion
Slug
edd-tab-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
edd-tab-manager
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
edd-tab-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
edd-venmo
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
edge-gallery
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
edge-gallery
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
edit-comments
Published
2021-07-24
Title
Edit Comments <= 0.3 - Unauthenticated SQL Injection
Slug
edit-comments
Published
2021-07-24
Title
Edit Comments <= 0.3 - Reflected Cross-Site Scripting
Slug
edit-comments-xt
Published
2021-09-09
Title
Edit Comments XT <= 1.0 - Reflected Cross-Site Scripting
Slug
editable-table
Published
2021-10-25
Title
EditableTable <= 0.1.4 - Admin+ Stored Cross-Site Scripting
Slug
editionguard-for-woocommerce-ebook-sales-with-drm
Published
2024-12-18
Title
EditionGuard for WooCommerce – eBook Sales with DRM <= 3.4.2 - Cross-Site Request Forgery to Privilege Escalation