WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ekc-tournament-manager
Published
2024-09-10
Title
EKC Tournament Manager < 2.2.2 - Admin+ Arbitrary File Download
Slug
ekc-tournament-manager
Published
2024-09-10
Title
EKC Tournament Manager < 2.2.2 - Delete Tournaments via CSRF
Slug
ekc-tournament-manager
Published
2024-09-10
Title
EKC Tournament Manager < 2.2.2 - Create Tournaments/Teams via CSRF
Slug
ekiline-block-collection
Published
2024-11-08
Title
Ekiline Block Collection < 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elastic-email-sender
Published
2023-07-20
Title
Elastic Email Sender < 1.2.7 - Admin+ Stored XSS
Slug
elastic-email-sender
Published
2025-10-28
Title
Elastic Email Sender < 1.2.21 - Missing Authorization
Slug
elastic-email-subscribe-form
Published
2025-06-05
Title
Elastic Email Subscribe Form <= 1.2.2 - Missing Authorization
Slug
elastic-theme-editor
Published
2025-11-10
Title
Elastic Theme Editor <= 0.0.3 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
elasticpress
Published
2021-03-01
Title
ElasticPress < 3.5.4 - Cross-Site Request Forgery
Slug
elasticpress
Published
2024-06-06
Title
ElasticPress < 5.1.2 - Data Sync via CSRF
Slug
elastik-page-builder
Published
2024-09-30
Title
Elastik Page Builder <= 0.27.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
ele-blog
Published
2024-04-30
Title
Eleblog – Elementor Blog And Magazine Addons <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ele-blog
Published
2024-12-03
Title
Eleblog – Elementor Blog And Magazine Addons <= 1.8 - Missing Authorization to Authenticated (Subscriber+) Deactivation Submission
Slug
ele-blog
Published
2026-02-05
Title
Eleblog – Elementor Blog And Magazine Addons <= 2.0.3 - Unauthenticated Local File Inclusion
Slug
ele-conditions
Published
2025-09-05
Title
Elementor Element Condition < 1.0.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
electio-core
Published
2026-01-28
Title
Electio Core <= 1.4 - Unauthenticated SQL Injection
Slug
electric-enquiries
Published
2026-02-26
Title
Electric Enquiries <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' Shortcode Attribute
Slug
electric-studio-client-login
Published
2023-04-14
Title
Electric Studio Client Login <= 0.8.1 - Admin+ Stored XSS
Slug
electric-studio-download-counter
Published
2026-01-13
Title
Electric Studio Download Counter <= 2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings Parameters
Slug
electrician
Published
2025-12-30
Title
Electrician - Electrical Service WordPress <= 5.6 - Unauthenticated Server-Side Request Forgery
Slug
elegance-menu
Published
2025-11-03
Title
Elegance Menu < 1.9.1 - Authenticated (Contributor+) Local File Inclusion
Slug
elegant-addons-for-elementor
Published
2024-05-21
Title
Elegant Addons for elementor <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Switcher, Slider, and Iconbox Widgets
Slug
elegant-addons-for-elementor
Published
2024-05-21
Title
Elegant Addons for elementor <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML tags
Slug
elegant-blocks
Published
2024-05-17
Title
Elegant Blocks <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elegant-calendar-lite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius