WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
elex-product-feed
Published
2025-05-07
Title
ELEX Product Feed for WooCommerce < 3.1.3 - Admin+ SQL Injection
Slug
elex-reachship-multi-carrier-conditional-shipping
Published
2025-07-22
Title
ReachShip WooCommerce Multi-Carrier & Conditional Shipping < 4.3.2 - Authenticated (Contributor+) Arbitrary File Upload
Slug
elex-request-a-quote
Published
2025-03-31
Title
ELEX WooCommerce Request a Quote < 2.4.0 - Missing Authorization
Slug
elex-woocommerce-dynamic-pricing-and-discounts
Published
2024-04-05
Title
ELEX WooCommerce Dynamic Pricing and Discounts < 2.1.3 - Reflected Cross-Site Scripting
Slug
elex-woocommerce-dynamic-pricing-and-discounts
Published
2024-04-08
Title
ELEX WooCommerce Dynamic Pricing and Discounts < 2.1.3 - Cross-Site Request Forgery
Slug
elex-woocommerce-dynamic-pricing-and-discounts
Published
2024-04-11
Title
ELEX WooCommerce Dynamic Pricing and Discounts < 2.1.3 - Cross-Site Request Forgery
Slug
elex-woocommerce-dynamic-pricing-and-discounts
Published
2024-12-23
Title
ELEX WooCommerce Dynamic Pricing and Discounts < 2.1.8 - Missing Authorization
Slug
elex-woocommerce-google-product-feed-plugin-basic
Published
2021-09-06
Title
ELEX WooCommerce Google Shopping < 1.2.4 - Reflected Cross-Site Scripting (XSS)
Slug
elex-woocommerce-google-product-feed-plugin-basic
Published
2025-09-05
Title
ELEX WooCommerce Google Shopping (Google Product Feed) < 1.4.4 - Authenticated (Admin+) SQL Inejction
Slug
elfsight-contact-form
Published
2025-06-04
Title
elfsight Contact Form widget <= 2.3.1 - Unauthenticated Information Exposure
Slug
elfsight-pricing-table
Published
2024-07-08
Title
Pricing Table <= 2.0.1 - Cross-Site Request Forgery via ajax()
Slug
elfsight-pricing-table
Published
2024-07-08
Title
Pricing Table <= 2.0.1 - Missing Authorization
Slug
elfsight-telegram-chat-cc
Published
2024-11-18
Title
Elfsight Telegram Chat CC <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
elfsight-testimonials-slider
Published
2025-03-31
Title
Elfsight Testimonials Slider <= 1.0.1 - Missing Authorization
Slug
elfsight-testimonials-slider
Published
2025-03-31
Title
Elfsight Testimonials Slider <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
elfsight-testimonials-slider
Published
2025-03-31
Title
Elfsight Testimonials Slider <= 1.0.1 - Cross-Site Request Forgery to Settings Update
Slug
elfsight-whatsapp-chat
Published
2026-02-26
Title
Elfsight WhatsApp Chat CC <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elink-embed-content
Published
2025-08-14
Title
elink <= 1.1.0 - Contributor+ Arbitrary Redirect
Slug
elisqlreports
Published
2015-09-14
Title
EZ SQL Reports < 4.11.37 - Authenticated Arbitrary File Download
Slug
elisqlreports
Published
2015-09-14
Title
EZ SQL Reports < 4.11.37 - Authenticated Arbitrary Code Execution
Slug
elisqlreports
Published
2025-02-22
Title
EZ SQL Reports Shortcode Widget and DB Backup < 5.25.08 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elisqlreports
Published
2025-03-24
Title
EZ SQL Reports Shortcode Widget and DB Backup 4.11.13 - 5.25.08 - Cross-Site Request Forgery to Remote Code Execution
Slug
elisqlreports
Published
2025-03-27
Title
EZ SQL Reports Shortcode Widget and DB Backup < 5.25.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
elisqlreports
Published
2025-03-27
Title
EZ SQL Reports Shortcode Widget and DB Backup < 5.25.10 - Cross-Site Request Forgery
Slug
elisqlreports
Published
2025-06-28
Title
EZ SQL Reports Shortcode Widget and DB Backup < 5.25.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via SQLREPORT Shortcode