WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
eelv-newsletter
Published
2014-08-01
Title
EELV Newsletter - Cross-Site Scripting
Slug
eelv-newsletter
Published
2017-05-18
Title
EELV Newsletter < 4.6.1 - CSRF & XSS
Slug
eelv-newsletter
Published
2024-12-12
Title
EELV Newsletter <= 4.8.2 - Cross-Site Request Forgery
Slug
eelv-newsletter
Published
2025-01-16
Title
EELV Newsletter <= 4.8.2 - Reflected Cross-Site Scripting
Slug
eelv-redirection
Published
2024-12-04
Title
Simple Redirection < 1.5.1 - Cross-Site Request Forgery to Arbitrary Site Redirect
Slug
eewee-admincustom
Published
2024-11-04
Title
eewee admin custom <= 1.8.2.4 - Reflected Cross-Site Scripting
Slug
eewee-admincustom
Published
2024-12-05
Title
eewee admin custom <= 1.8.2.4 - Cross-Site Request Forgery to Privilege Escalation
Slug
eexamhall
Published
2023-01-13
Title
eExamhall <= 4.0 - CSRF
Slug
efence
Published
2014-05-28
Title
Efence <= 1.3.2 - Multiple XSS
Slug
effect-maker
Published
2025-09-30
Title
Effect Maker <= 1.2.1 - Missing Authorization
Slug
effect-maker
Published
2025-12-31
Title
Effect Maker <= 1.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
eg-attachments
Published
2023-10-16
Title
EG-Attachments <= 2.1.3 - Reflected XSS
Slug
eg-series
Published
2025-05-14
Title
EG-Series <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
ehive-account-details
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
ehive-object-details
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
ehive-objects-image-grid
Published
2025-01-30
Title
eHive Objects Image Grid < 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ehive-search
Published
2026-01-06
Title
eHive Search < 2.5.1 - Reflected Cross-Site Scripting
Slug
eid-easy-qualified-electonic-signature
Published
2024-06-25
Title
Various Plugins <= Various Version - Use of Polyfill.io
Slug
eight-day-week-print-workflow
Published
2025-12-21
Title
Eight Day Week Print Workflow < 1.2.6 - Authenticated (Custom+) Information Exposure
Slug
einvoiceapp-malaysia
Published
2025-12-21
Title
E-Invoice App Malaysia <= 1.3.0 - Unauthenticated Information Exposure
Slug
ekc-tournament-manager
Published
2024-10-21
Title
EKC Tournament Manager < 2.2.2 - Cross-Site Request Forgery to Arbitrary File Upload
Slug
ekc-tournament-manager
Published
2024-09-10
Title
EKC Tournament Manager < 2.2.2 - Admin+ Arbitrary File Download
Slug
ekc-tournament-manager
Published
2024-09-10
Title
EKC Tournament Manager < 2.2.2 - Delete Tournaments via CSRF
Slug
ekc-tournament-manager
Published
2024-09-10
Title
EKC Tournament Manager < 2.2.2 - Create Tournaments/Teams via CSRF
Slug
ekiline-block-collection
Published
2024-11-08
Title
Ekiline Block Collection < 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting