WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
endless-posts-navigation
Published
2024-10-18
Title
Endless Posts Navigation < 2.2.8 - Cross-Site Request Forgery
Slug
endomondowp
Published
2024-10-31
Title
EndomondoWP <= 0.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
english-wp-admin
Published
2022-03-29
Title
English WordPress Admin < 1.5.2 - Unauthenticated Open Redirect
Slug
enhanced-bibliplug
Published
2025-09-10
Title
Enhanced BibliPlug <= 1.3.8 - Authenticated (Contirbutor+) Stored Cross-Site Scripting
Slug
enhanced-blocks
Published
2025-06-19
Title
Enhanced Blocks – Page Builder Blocks for Gutenberg <= 1.4.1 - Missing Authorization
Slug
enhanced-catalog-images-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
enhanced-catalog-images-for-woocommerce
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
enhanced-catalog-images-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
enhanced-e-commerce-for-woocommerce-store
Published
2022-02-01
Title
Conversios.io < 4.6.2 - Subscriber+ SQL Injection
Slug
enhanced-e-commerce-for-woocommerce-store
Published
2023-02-06
Title
Conversios.io < 5.2.4 - Settings Update via CSRF
Slug
enhanced-e-commerce-for-woocommerce-store
Published
2023-10-17
Title
Conversios.io < 6.5.4 - Reflected XSS
Slug
enhanced-e-commerce-for-woocommerce-store
Published
2024-02-27
Title
Conversios < 7.0.8 - Subscriber+ SQL Injection
Slug
enhanced-e-commerce-for-woocommerce-store
Published
2024-02-27
Title
Conversios < 7.0.8 - Subscriber+ SQL Injection via ee_syncProductCategory
Slug
enhanced-e-commerce-for-woocommerce-store
Published
2024-03-25
Title
Conversios.io < 7.0.0 - Reflected Cross-Site Scripting
Slug
enhanced-e-commerce-for-woocommerce-store
Published
2024-06-27
Title
Conversios.io - All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce < 7.1.1 - Reflected Cross-Site Scripting
Slug
enhanced-e-commerce-for-woocommerce-store
Published
2025-03-27
Title
Conversios.io < 7.2.4 - Missing Authorization
Slug
enhanced-e-commerce-for-woocommerce-store
Published
2025-10-05
Title
Conversios.io < 7.2.14 - Missing Authorization
Slug
enhanced-media-library
Published
2024-04-15
Title
Enhanced Media Library < 2.8.10 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
enhanced-paypal-shortcodes
Published
2025-04-25
Title
Enhanced Paypal Shortcodes <= 0.5a - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
enhanced-plugin-admin
Published
2017-04-14
Title
Enhanced Plugin Admin <= 1.15 - XSS
Slug
enhanced-plugin-admin
Published
2023-11-12
Title
Enhanced Admin < 1.17 - CSRF
Slug
enhanced-text-widget
Published
2023-07-27
Title
Multiple Plugins from Inisev - Subscriber+ Plugin Installation
Slug
enhanced-text-widget
Published
2023-07-27
Title
Multiple Plugins from Inisev - Plugin Installation via CSRF
Slug
enhanced-text-widget
Published
2024-02-13
Title
Enhanced Text Widget < 1.6.6 - Admin+ Stored XSS
Slug
enhanced-tooltipglossary
Published
2016-05-11
Title
enhanced-tooltipglossary <= 3.3.4 - XSS