WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
email-artillery
Published
2021-08-16
Title
Email Artillery <= 4.1 - Arbitrary File Upload
Slug
email-attachment-by-order-status-products
Published
2025-07-14
Title
Email Attachment by Order Status & Products <= 1.0.1 - Reflected Cross-Site Scripting
Slug
email-before-download
Published
2015-07-28
Title
Email Before Download < 3.4.1 - SQL Injection
Slug
email-before-download
Published
2017-06-21
Title
Email Before Download < 4.0 - SQL Injection
Slug
email-before-download
Published
2017-06-21
Title
Email Before Download < 4.0 - SMTP Header Injection
Slug
email-before-download
Published
2021-11-01
Title
Email Before Download < 6.8 - Admin+ SQL Injection
Slug
email-before-download
Published
2024-01-30
Title
Email Before Download <= 6.9.7 - Cross-Site Request Forgery
Slug
email-capture-lead-generation
Published
2025-01-16
Title
Email Capture & Lead Generation <= 1.0.2 - Missing Authorization
Slug
email-customizer-for-woocommerce
Published
2024-04-22
Title
Email Customizer for WooCommerce | Drag and Drop Email Templates Builder < 2.6.1 - Information Exposure
Slug
email-customizer-for-woocommerce
Published
2026-01-06
Title
Email Customizer for WooCommerce | Drag and Drop Email Templates Builder < 2.6.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via Email Template Content
Slug
email-customizer-for-woocommerce-with-drag-drop-builder
Published
2025-03-04
Title
WooMail - WooCommerce Email Customizer <= 3.0.34 - Authenticated (Subscriber+) Missing Authorization to SQL Injection
Slug
email-customizer-woocommerce
Published
2022-12-09
Title
Visual Email Designer for WooCommerce < 1.7.2 - Multiple Author+ SQLi
Slug
email-encoder-bundle
Published
2015-08-10
Title
Email Encoder Bundle <= 1.4.1 - Unauthenticated Cross-Site Scripting (XSS)
Slug
email-encoder-bundle
Published
2021-08-02
Title
Email Encoder < 2.1.2 - Reflected Cross Site Scripting
Slug
email-encoder-bundle
Published
2023-08-29
Title
Email Encoder < 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
email-encoder-bundle
Published
2023-11-15
Title
Email Encoder Bundle < 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
email-encoder-bundle
Published
2024-01-09
Title
Email Encoder < 2.1.10 - Contributor+ Stored Cross-Site Scripting
Slug
email-encoder-bundle
Published
2024-02-13
Title
Email Encoder – Protect Email Addresses and Phone Numbers < 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
email-encoder-bundle
Published
2024-07-08
Title
Email Encoder < 2.2.2 - Admin+ Stored XSS
Slug
email-form-under-post
Published
2024-12-12
Title
Mandrill WP <= 1.0.5 - Cross-Site Request Forgery
Slug
email-header-footer
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
email-header-footer
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
email-keep
Published
2025-02-14
Title
Email Keep <= 1.1 - Reflected XSS
Slug
email-keep
Published
2025-02-14
Title
Email Keep <= 1.1 - Email Deletion via CSRF
Slug
email-log
Published
2017-11-11
Title
Email Log <= 2.2.2 - Stored Cross-Site Scripting (XSS)