WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-code-snippets
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-code-snippets
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
easy-code-snippets
Published
2024-12-06
Title
Easy Code Snippets <= 1.0.2 - Reflected Cross-Site Scripting
Slug
easy-code-snippets
Published
2025-01-16
Title
Easy Code Snippets <= 1.0.2 - Authenticated (Administrator+) SQL Injection
Slug
easy-coming-soon
Published
2015-03-18
Title
Easy Coming Soon < 1.6.3 - Stored Cross-Site Scripting (XSS)
Slug
easy-coming-soon
Published
2015-08-24
Title
Easy Coming Soon <= 1.8.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
easy-coming-soon
Published
2023-08-28
Title
Easy Coming Soon <= 2.3 - Admin+ Stored XSS
Slug
easy-contact
Published
2025-04-04
Title
Easy Contact <= 0.1.2 - Reflected Cross-Site Scripting
Slug
easy-contact-form-lite
Published
2014-08-01
Title
Easy Contact Form Lite <= 1.0.7 - SQL Injection
Slug
easy-contact-form-pro
Published
2021-01-15
Title
Easy Contact Form Pro < 1.1.1.9 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
easy-contact-form-solution
Published
2014-10-17
Title
Easy Contact Form Solution 1.0-1.6 - Stored Cross-Site Scripting (XSS)
Slug
easy-contact-forms-exporter
Published
2014-08-01
Title
Easy Contact Forms Export 1.1.0 - Information Disclosure
Slug
easy-cookie-law
Published
2023-08-11
Title
Easy Cookie Law <= 3.1 - Settings Update via CSRF
Slug
easy-cookies-policy
Published
2021-06-11
Title
Easy Cookie Policy <= 1.6.2 - Broken Access Control to Stored Cross-Site Scripting
Slug
easy-countdowner
Published
2024-04-15
Title
Easy CountDowner <= 1.0.8 - Cross-Site Request Forgery
Slug
easy-courses
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-csv-importer
Published
2024-11-11
Title
Easy CSV Importer BETA <= 7.0.0 - Unauthenticated Arbitrary File Upload
Slug
easy-custom-admin-bar
Published
2025-03-21
Title
Easy Custom Admin Bar <= 1.0 - Reflected Cross-Site Scripting via msg Parameter
Slug
easy-custom-auto-excerpt
Published
2018-11-14
Title
Easy Custom Auto Excerpt <= 2.4.6 - XSS
Slug
easy-custom-auto-excerpt
Published
2024-04-18
Title
Easy Custom Auto Excerpt < 2.5.0 - Sensitive Information Exposure
Slug
easy-custom-code
Published
2024-07-05
Title
Easy Custom Code (LESS/CSS/JS) – Live editing < 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
easy-custom-css
Published
2025-04-09
Title
Easy Custom CSS <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
easy-custom-js-and-css
Published
2021-10-11
Title
Multiple Plugins from Avirtum - Reflected Cross-Site Scripting
Slug
easy-custom-js-and-css-pro
Published
2021-10-11
Title
Multiple Plugins from Avirtum - Reflected Cross-Site Scripting
Slug
easy-demo-importer
Published
2024-10-03
Title
Easy Demo Importer – A Modern One-Click Demo Import Solution < 1.1.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload