WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
elfsight-testimonials-slider
Published
2025-03-31
Title
Elfsight Testimonials Slider <= 1.0.1 - Cross-Site Request Forgery to Settings Update
Slug
elink-embed-content
Published
2025-08-14
Title
elink <= 1.1.0 - Contributor+ Arbitrary Redirect
Slug
elisqlreports
Published
2015-09-14
Title
EZ SQL Reports < 4.11.37 - Authenticated Arbitrary File Download
Slug
elisqlreports
Published
2015-09-14
Title
EZ SQL Reports < 4.11.37 - Authenticated Arbitrary Code Execution
Slug
elisqlreports
Published
2025-02-22
Title
EZ SQL Reports Shortcode Widget and DB Backup < 5.25.08 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elisqlreports
Published
2025-03-24
Title
EZ SQL Reports Shortcode Widget and DB Backup 4.11.13 - 5.25.08 - Cross-Site Request Forgery to Remote Code Execution
Slug
elisqlreports
Published
2025-03-27
Title
EZ SQL Reports Shortcode Widget and DB Backup < 5.25.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
elisqlreports
Published
2025-03-27
Title
EZ SQL Reports Shortcode Widget and DB Backup < 5.25.10 - Cross-Site Request Forgery
Slug
elisqlreports
Published
2025-06-28
Title
EZ SQL Reports Shortcode Widget and DB Backup < 5.25.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via SQLREPORT Shortcode
Slug
elite-notification
Published
2024-12-05
Title
Elite Notification < 2.0.0 - Subscriber+ Stored XSS
Slug
elite-video-player
Published
2025-06-05
Title
Elite Video Player <= 10.0.5 - Cross-Site Request Forgery
Slug
elite-video-player
Published
2025-06-11
Title
Elite Video Player <= 10.0.5 - Reflected Cross-Site Scripting
Slug
elite-video-player
Published
2025-07-22
Title
Elite Video Player < 10.0.7 - Reflected Cross-Site Scripting
Slug
elizaibot-chatbots
Published
2025-08-16
Title
Elizaibots <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ellipsis-human-presence-technology
Published
2019-09-07
Title
Ellipsis Human Presence Technology <= 2.0.8 - Unauthenticated Reflected Cross Site Scripting (XSS)
Slug
elo-rating-shortcode
Published
2024-11-01
Title
Elo Rating Shortcode < 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
eltdf-membership
Published
2025-12-09
Title
Elated Membership < 1.3 - Authentication Bypass via Social Login
Slug
em-beer-manager
Published
2025-11-03
Title
EM Beer Manager <= 3.2.3 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
emag-marketplace-connector
Published
2017-11-21
Title
Emag Marketplace Connector 1.0 - Unauthenticated Cross-Site Scripting (XSS)
Slug
email-address-encoder
Published
2023-11-28
Title
Email Address Encoder 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
email-address-encoder
Published
2024-08-26
Title
Email Address Encoder < 1.0.24 - Cross-Site Request Forgery via eae_clear_caches()
Slug
email-address-obfuscation
Published
2024-12-03
Title
Email Address Obfuscation < 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter
Slug
email-artillery
Published
2021-08-16
Title
Email Artillery <= 4.1 - Multiple Authenticated SQL Injections
Slug
email-artillery
Published
2021-08-16
Title
Email Artillery <= 4.1 - CSRF to Stored XSS
Slug
email-artillery
Published
2021-08-16
Title
Email Artillery <= 4.1 - Multiple Reflected Cross-Site Scripting