WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
education-addon
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
education-addon
Published
2025-02-18
Title
Education Addon for Elementor <= 1.3.1 - Authenticated (Contributor+) Insecure Direct Object Reference via naedu_elementor_template Shortcode
Slug
edukart-pro
Published
2025-11-24
Title
EduKart Pro <= 1.0.3 - Unauthenticated Privilege Escalation
Slug
edunext-openedx-integrator
Published
2024-11-18
Title
Open edX LMS <= 2.6.1 - Reflected Cross-Site Scripting
Slug
edwiser-bridge
Published
2021-04-16
Title
Edwiser Bridge < 2.0.7 - CSRF Nonce Bypass
Slug
edwiser-bridge
Published
2021-06-28
Title
Edwiser Bridge < 2.0.7 - Cross-Site Request Forgery
Slug
edwiser-bridge
Published
2024-04-05
Title
Edwiser Bridge < 3.0.4 - Authenticated (Administrator+) SQL Injection
Slug
edwiser-bridge
Published
2024-05-06
Title
Edwiser Bridge < 3.0.6 - Authentication Bypass due to Missing Empty Value Check
Slug
edwiser-bridge
Published
2024-10-15
Title
Edwiser Bridge < 3.0.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
edwiser-bridge
Published
2024-10-15
Title
Edwiser Bridge < 3.0.8 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
edwiser-bridge
Published
2024-12-25
Title
Edwiser Bridge – WordPress Moodle LMS Integration < 3.1.0 - Reflected Cross-Site Scripting
Slug
edwiser-bridge
Published
2026-01-21
Title
Edwiser Bridge < 4.3.3 - Missing Authorization
Slug
eelv-newsletter
Published
2014-08-01
Title
EELV Newsletter 3.4.3 - lettreinfo.php Unspecified XSS
Slug
eelv-newsletter
Published
2014-08-01
Title
EELV Newsletter - Cross-Site Scripting
Slug
eelv-newsletter
Published
2017-05-18
Title
EELV Newsletter < 4.6.1 - CSRF & XSS
Slug
eelv-newsletter
Published
2024-12-12
Title
EELV Newsletter <= 4.8.2 - Cross-Site Request Forgery
Slug
eelv-newsletter
Published
2025-01-16
Title
EELV Newsletter <= 4.8.2 - Reflected Cross-Site Scripting
Slug
eelv-redirection
Published
2024-12-04
Title
Simple Redirection < 1.5.1 - Cross-Site Request Forgery to Arbitrary Site Redirect
Slug
eewee-admincustom
Published
2024-11-04
Title
eewee admin custom <= 1.8.2.4 - Reflected Cross-Site Scripting
Slug
eewee-admincustom
Published
2024-12-05
Title
eewee admin custom <= 1.8.2.4 - Cross-Site Request Forgery to Privilege Escalation
Slug
eexamhall
Published
2023-01-13
Title
eExamhall <= 4.0 - CSRF
Slug
efence
Published
2014-05-28
Title
Efence <= 1.3.2 - Multiple XSS
Slug
effect-maker
Published
2025-09-30
Title
Effect Maker <= 1.2.1 - Missing Authorization
Slug
effect-maker
Published
2025-12-31
Title
Effect Maker <= 1.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
eg-attachments
Published
2023-10-16
Title
EG-Attachments <= 2.1.3 - Reflected XSS