WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
electric-enquiries
Published
2026-02-26
Title
Electric Enquiries <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' Shortcode Attribute
Slug
electric-studio-client-login
Published
2023-04-14
Title
Electric Studio Client Login <= 0.8.1 - Admin+ Stored XSS
Slug
electric-studio-download-counter
Published
2026-01-13
Title
Electric Studio Download Counter <= 2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings Parameters
Slug
electrician
Published
2025-12-30
Title
Electrician - Electrical Service WordPress <= 5.6 - Unauthenticated Server-Side Request Forgery
Slug
elegance-menu
Published
2025-11-03
Title
Elegance Menu < 1.9.1 - Authenticated (Contributor+) Local File Inclusion
Slug
elegant-addons-for-elementor
Published
2024-05-21
Title
Elegant Addons for elementor <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Switcher, Slider, and Iconbox Widgets
Slug
elegant-addons-for-elementor
Published
2024-05-21
Title
Elegant Addons for elementor <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML tags
Slug
elegant-blocks
Published
2024-05-17
Title
Elegant Blocks <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elegant-calendar-lite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
elegant-themes-icons
Published
2024-06-20
Title
Elegant Themes Icons <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elegant-visitor-counter
Published
2025-06-05
Title
Elegant Visitor Counter <= 3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
elemenda
Published
2024-10-17
Title
Elemenda <= 0.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
element-camp
Published
2026-01-22
Title
ElementCamp < 2.3.6 - Missing Authorization
Slug
element-camp
Published
2026-03-20
Title
ElementCamp <= 2.3.6 - Authenticated (Author+) SQL Injection via 'meta_query[compare]' Parameter
Slug
element-ready-lite
Published
2024-05-03
Title
ElementsReady Addons for Elementor < 5.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
element-ready-lite
Published
2024-06-05
Title
ElementsReady Addons for Elementor < 6.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
element-ready-lite
Published
2024-09-25
Title
ElementsReady Addons for Elementor < 6.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
element-ready-lite
Published
2024-09-30
Title
ElementsReady Addons for Elementor 6.4.2 - Open Redirect
Slug
element-ready-lite
Published
2024-10-15
Title
ElementsReady Addons for Elementor < 6.4.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
element-ready-lite
Published
2024-11-04
Title
ElementsReady Addons for Elementor < 6.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
element-ready-lite
Published
2024-12-05
Title
ElementsReady Addons for Elementor < 6.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
element-ready-lite
Published
2024-12-16
Title
ElementsReady Addons for Elementor < 6.4.9 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Slug
element-ready-lite
Published
2025-04-16
Title
ElementsReady Addons for Elementor < 6.6.3 - Cross-Site Request Forgery
Slug
elementary-addons
Published
2024-10-31
Title
Elementary Addons <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elementinvader
Published
2026-01-16
Title
Element Invader – Template Kits for Elementor < 1.2.5 - Missing Authorization