WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
enable-media-replace
Published
2022-09-14
Title
Enable Media Replace < 4.0.0 - Admin+ Path Traversal
Slug
enable-media-replace
Published
2023-01-17
Title
Enable Media Replace < 4.0.2 - Author+ Arbitrary File Upload
Slug
enable-media-replace
Published
2023-09-21
Title
Enable Media Replace < 4.1.3 - Author+ PHP Object Injection
Slug
enable-media-replace
Published
2023-12-18
Title
Enable Media Replace < 4.1.5 - Reflected Cross-Site Scripting
Slug
enable-media-replace
Published
2025-04-01
Title
Enable Media Replace < 4.1.6 - Reflected XSS
Slug
enable-media-replace
Published
2025-10-10
Title
Enable Media Replace < 4.1.7 - Contributor+ Stored XSS
Slug
enable-shortcodes-inside-widgetscomments-and-experts
Published
2024-10-29
Title
Enable Shortcodes inside Widgets,Comments and Experts <= 1.0.0 - Unauthenticated Arbitrary Shortcode Execution
Slug
enable-svg
Published
2022-05-03
Title
Enable SVG < 1.4.0 - Author+ Stored Cross Site Scripting via SVG
Slug
enable-svg-uploads
Published
2023-06-19
Title
Enable SVG Uploads <= 2.1.5 - Author+ Stored XSS via SVG
Slug
enable-svg-webp-ico-upload
Published
2022-08-01
Title
Enable SVG, WebP & ICO Upload < 1.1.1 - Author+ Arbitrary File Upload
Slug
enable-svg-webp-ico-upload
Published
2022-08-01
Title
Enable SVG, WebP & ICO Upload < 1.0.7 - Author+ Stored Cross-Site Scripting
Slug
enable-svg-webp-ico-upload
Published
2023-06-23
Title
Enable SVG, WebP & ICO Upload < 1.1.1 - Author+ Stored XSS
Slug
enable-svg-webp-ico-upload
Published
2025-11-17
Title
Enable SVG, WebP, and ICO Upload < 1.1.4 - Authenticated (Author+) Arbitrary File Upload via ICO Upload Bypass
Slug
enable-svg-webp-ico-upload
Published
2025-11-17
Title
Enable SVG, WebP, and ICO Upload < 1.1.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploads
Slug
enable-wp-debug-from-admin-dashboard
Published
2022-08-01
Title
Multiple Plugins from Puvox.software - Reflected Cross-Site Scripting
Slug
enable-wp-debug-toggle
Published
2025-04-14
Title
WP_DEBUG Toggle <= 1.1 - Reflected Cross-Site Scripting
Slug
encrypted-blog
Published
2014-08-01
Title
Encrypted Blog 0.0.6.2 - encrypt_blog_form.php redirect_to Parameter Arbitrary Site Redirect
Slug
encrypted-blog
Published
2014-08-01
Title
Encrypted Blog 0.0.6.2 - encrypt_blog_form.php redirect_to Parameter Reflected XSS
Slug
encrypted-contact-form
Published
2015-05-15
Title
Encrypted Contact Form < 1.1 - CSRF & XSS
Slug
encyclopedia-lexicon-glossary-wiki-dictionary
Published
2024-10-15
Title
Encyclopedia / Glossary / Wiki < 1.7.61 - Reflected Cross-Site Scripting
Slug
endless-posts-navigation
Published
2024-10-18
Title
Endless Posts Navigation < 2.2.8 - Cross-Site Request Forgery
Slug
endomondowp
Published
2024-10-31
Title
EndomondoWP <= 0.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
english-wp-admin
Published
2022-03-29
Title
English WordPress Admin < 1.5.2 - Unauthenticated Open Redirect
Slug
enhanced-bibliplug
Published
2025-09-10
Title
Enhanced BibliPlug <= 1.3.8 - Authenticated (Contirbutor+) Stored Cross-Site Scripting
Slug
enhanced-blocks
Published
2025-06-19
Title
Enhanced Blocks – Page Builder Blocks for Gutenberg <= 1.4.1 - Missing Authorization