WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
editionguard-for-woocommerce-ebook-sales-with-drm
Published
2025-01-16
Title
EditionGuard for WooCommerce – eBook Sales with DRM <= 3.4.2 - Reflected Cross-Site Scripting
Slug
editor-custom-color-palette
Published
2024-10-25
Title
Editor Custom Color Palette < 3.3.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
editor-custom-color-palette
Published
2025-09-22
Title
Editor Custom Color Palette <= 3.5.4 - Missing Authorization
Slug
editor-wysiwyg-background-color
Published
2025-04-16
Title
Editor Wysiwyg Background Color <= 1.0 - Missing Authorization
Slug
editorial-calendar
Published
2014-08-01
Title
Editorial Calendar 2.6 - Post Title XSS
Slug
editorial-calendar
Published
2014-08-01
Title
Editorial Calendar 2.6 - Permission Verification Arbitrary Calendar Post Deletion
Slug
editorial-calendar
Published
2014-08-01
Title
Editorial Calendar 2.6 - Post Query Multiple Filter SQL Injection
Slug
editorial-calendar
Published
2022-06-05
Title
Editorial Calendar < 3.8.3 - Contributor+ Stored XSS
Slug
editorial-calendar
Published
2025-12-20
Title
Editorial Calendar < 3.8.9 - Missing Authorization
Slug
editorial-calendar
Published
2026-02-15
Title
Editorial Calendar < 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
editormonkey
Published
2014-08-01
Title
EditorMonkey - (FCKeditor) Arbitrary File Upload
Slug
edoc-easy-tables
Published
2025-01-07
Title
eDoc Easy Tables <= 1.29 - Authenticated (Contributor+) SQL Injection
Slug
edoc-employee-application
Published
2023-11-23
Title
eDoc Employee Job Application <= 1.13 - Reflected Cross-Site Scripting
Slug
eds-font-awesome
Published
2026-03-20
Title
Ed's Font Awesome <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
eds-responsive-menu
Published
2025-06-19
Title
eDS Responsive Menu <= 1.2 - Missing Authorization
Slug
eds-responsive-menu
Published
2025-09-05
Title
eDS Responsive Menu <= 1.2 - Authenticated (Administrator+) PHP Object Injection
Slug
eds-responsive-menu
Published
2026-01-27
Title
eDS Responsive Menu <= 1.2 - Reflected Cross-Site Scripting
Slug
eds-social-share
Published
2026-03-20
Title
Ed's Social Share <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
eduadmin-booking
Published
2024-12-11
Title
EduAdmin Booking < 5.3.0 - Authenticated (Contributor+) Local File Inclusion
Slug
edubin
Published
2024-07-29
Title
Edubin <= 9.2.0 - Unauthenticated Server-Side Request Forgery
Slug
edublink-core
Published
2026-01-06
Title
EduBlink Core <= 2.0.7 - Authenticated (Contributor+) Local File Inclusion
Slug
educare
Published
2023-02-21
Title
Educare - Students & Result Management System < 1.4.4 - Cross-Site Request Forgery (CSRF)
Slug
educare
Published
2023-09-09
Title
Educare < 1.4.7 - Missing Authorization to Sensitive Information Exposure
Slug
educare
Published
2026-01-28
Title
Educare < 1.6.2 - Unauthenticated Stored Cross-Site Scripting
Slug
education-addon
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius