WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
elite-notification
Published
2024-12-05
Title
Elite Notification < 2.0.0 - Subscriber+ Stored XSS
Slug
elite-video-player
Published
2025-06-05
Title
Elite Video Player <= 10.0.5 - Cross-Site Request Forgery
Slug
elite-video-player
Published
2025-06-11
Title
Elite Video Player <= 10.0.5 - Reflected Cross-Site Scripting
Slug
elite-video-player
Published
2025-07-22
Title
Elite Video Player < 10.0.7 - Reflected Cross-Site Scripting
Slug
elizaibot-chatbots
Published
2025-08-16
Title
Elizaibots <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elizaibot-chatbots
Published
2025-08-16
Title
Elizaibots <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ellipsis-human-presence-technology
Published
2019-09-07
Title
Ellipsis Human Presence Technology <= 2.0.8 - Unauthenticated Reflected Cross Site Scripting (XSS)
Slug
elo-rating-shortcode
Published
2024-11-01
Title
Elo Rating Shortcode < 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
eltd-listing
Published
2026-04-16
Title
Elated Listing < 1.5 - Missing Authorization
Slug
eltdf-membership
Published
2025-12-09
Title
Elated Membership < 1.3 - Authentication Bypass via Social Login
Slug
em-beer-manager
Published
2025-11-03
Title
EM Beer Manager <= 3.2.3 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
emag-marketplace-connector
Published
2017-11-21
Title
Emag Marketplace Connector 1.0 - Unauthenticated Cross-Site Scripting (XSS)
Slug
email-address-encoder
Published
2023-11-28
Title
Email Address Encoder 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
email-address-encoder
Published
2024-08-26
Title
Email Address Encoder < 1.0.24 - Cross-Site Request Forgery via eae_clear_caches()
Slug
email-address-encoder
Published
2026-06-04
Title
Email Address Encoder (Free < 1.0.25, Premium < 0.3.12) - Unauthenticated Stored XSS
Slug
email-address-obfuscation
Published
2024-12-03
Title
Email Address Obfuscation < 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter
Slug
email-artillery
Published
2021-08-16
Title
Email Artillery <= 4.1 - Multiple Authenticated SQL Injections
Slug
email-artillery
Published
2021-08-16
Title
Email Artillery <= 4.1 - CSRF to Stored XSS
Slug
email-artillery
Published
2021-08-16
Title
Email Artillery <= 4.1 - Multiple Reflected Cross-Site Scripting
Slug
email-artillery
Published
2021-08-16
Title
Email Artillery <= 4.1 - Arbitrary File Upload
Slug
email-attachment-by-order-status-products
Published
2025-07-14
Title
Email Attachment by Order Status & Products <= 1.0.1 - Reflected Cross-Site Scripting
Slug
email-before-download
Published
2015-07-28
Title
Email Before Download < 3.4.1 - SQL Injection
Slug
email-before-download
Published
2017-06-21
Title
Email Before Download < 4.0 - SQL Injection
Slug
email-before-download
Published
2017-06-21
Title
Email Before Download < 4.0 - SMTP Header Injection
Slug
email-before-download
Published
2021-11-01
Title
Email Before Download < 6.8 - Admin+ SQL Injection