WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-age-verify
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-age-verify
Published
2024-06-27
Title
Easy Age Verify < 1.8.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
easy-age-verify
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
easy-amazon-product-information
Published
2025-02-13
Title
Easy Amazon Product Information <= 4.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
easy-appointments
Published
2017-10-16
Title
Easy Appointments < 1.12.0 - Cross-Site Scripting (XSS)
Slug
easy-appointments
Published
2022-12-27
Title
Easy Appointments < 3.11.2 - Contributor+ Stored XSS in Shortcode
Slug
easy-appointments
Published
2023-05-05
Title
Easy Appointments < 3.11.10 - Cross-Site Request Forgery
Slug
easy-appointments
Published
2024-03-28
Title
Easy Appointments < 3.11.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-appointments
Published
2024-03-28
Title
Easy Appointments < 3.11.19 - Insufficient Authorization
Slug
easy-appointments
Published
2025-09-09
Title
Easy Appointments < 3.12.14.1 - Unauthenticated Arbitrary Shortcode Execution
Slug
easy-appointments
Published
2026-04-17
Title
Easy Appointments < 3.12.22 - Unauthenticated Sensitive Information Exposure via REST API
Slug
easy-appointments
Published
2026-04-13
Title
Easy Appointments < 3.12.22 - Missing Authorization
Slug
easy-appointments
Published
2026-07-08
Title
Easy Appointments <= 3.12.26 - Contributor+ Customer Data Disclosure
Slug
easy-appointments
Published
2026-07-08
Title
Easy Appointments <= 3.12.26 - Contributor+ Appointment Data Disclosure & Modification via Missing Authorization
Slug
easy-appointments
Published
2026-07-08
Title
Easy Appointments <= 3.12.26 - Contributor+ Connection Deletion via Missing Authorization
Slug
easy-appointments
Published
2026-07-08
Title
Easy Appointments <= 3.12.26 - Subscriber+ Customer PII Disclosure via IDOR
Slug
easy-appointments
Published
2026-07-08
Title
Easy Appointments <= 3.12.26 - Subscriber+ Cross-User Appointment Data Modification via IDOR
Slug
easy-appointments
Published
2026-07-08
Title
Easy Appointments <= 3.12.26 - Contributor+ Shortcode Allowlist Bypass
Slug
easy-appointments
Published
2026-07-08
Title
Easy Appointments <= 3.12.26 - Subscriber+ Sensitive Information Disclosure via REST Appointments Listing
Slug
easy-appointments
Published
2026-07-09
Title
Easy Appointments < 3.12.28 - Missing Authorization to Authenticated (Author+) Bulk Appointment Manipulation
Slug
easy-author-image
Published
2015-05-26
Title
Easy Author Image 1.5 - Email Disclosure
Slug
easy-author-image
Published
2026-02-18
Title
Easy Author Image <= 1.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Picture URL
Slug
easy-automatic-newsletter
Published
2025-01-16
Title
Easy Automatic Newsletter Lite <= 3.2.0 - Reflected Cross-Site Scripting
Slug
easy-banners
Published
2014-08-01
Title
Easy Banners 1.4 - Cross-Site Scripting (XSS)
Slug
easy-bet
Published
2025-01-16
Title
Easy Bet <= 1.0.7 - Reflected Cross-Site Scripting