WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
envo-elementor-for-woocommerce
Published
2024-02-27
Title
Envo's Elementor Templates & Widgets for WooCommerce < 1.4.5 - Arbitrary Plugin Activation via CSRF
Slug
envo-elementor-for-woocommerce
Published
2024-05-10
Title
Envo's Elementor Templates & Widgets for WooCommerce < 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
envo-elementor-for-woocommerce
Published
2024-08-16
Title
Envo's Elementor Templates & Widgets for WooCommerce < 1.4.17 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
envo-elementor-for-woocommerce
Published
2024-10-24
Title
Envo's Elementor Templates & Widgets for WooCommerce < 1.4.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
envo-extra
Published
2023-10-17
Title
Envo Extra < 1.8.4 - Cross-Site Request Forgery
Slug
envo-extra
Published
2024-04-15
Title
Envo Extra < 1.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
envo-extra
Published
2024-05-15
Title
Envo Extra < 1.8.17 - Authenticated (Contributor+) Cross-Site Scripting
Slug
envo-extra
Published
2024-06-06
Title
Envo Extra < 1.8.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
Slug
envo-extra
Published
2024-11-08
Title
Envo Extra < 1.9.4 - Authenticated (Contributor+) Post Disclosure
Slug
envo-extra
Published
2025-05-07
Title
Envo Extra < 1.9.10 - Missing Authorization
Slug
envo-extra
Published
2025-12-05
Title
Envo Extra < 1.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
envo-extra
Published
2026-02-18
Title
Envo Extra < 1.9.14 - Missing Authorization
Slug
envolve-plugin
Published
2025-05-05
Title
Envolve Plugin < 1.1.0 - Unauthenticated Language File Deletion
Slug
envolve-plugin
Published
2025-05-08
Title
Envolve Plugin < 1.1.0 - Unauthenticated Arbitrary File Upload via language_file and fonts_file
Slug
enweby-variation-swatches-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
eonet-manual-user-approve
Published
2023-10-19
Title
Eonet Manual User Approve <= 2.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ep4-more-embeds
Published
2025-02-02
Title
EP4 More Embeds <= 1.0.0 - Unauthenticated Stored Cross-Site Scripting
Slug
epaybg-payments
Published
2025-07-18
Title
EPay.bg Payments <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
epeken-all-kurir
Published
2025-04-09
Title
Epeken All Kurir <= 2.0.6 - Stored XSS via CSRF
Slug
epeken-all-kurir
Published
2025-08-27
Title
Epeken All Kurir < 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
epeken-all-kurir
Published
2025-09-22
Title
Epeken All Kurir <= 2.0.6 - Shop manager+ Stored XSS
Slug
epermissions
Published
2025-01-16
Title
ePermissions <= 1.2 - Reflected Cross-Site Scripting
Slug
epic-bootstrap-buttons
Published
2025-10-02
Title
Epic Bootstrap Buttons <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icol Parameter
Slug
epic-review
Published
2025-08-30
Title
Epic Review < 1.0.3 - Reflected Cross-Site Scripting
Slug
epicwin-subscribers
Published
2025-06-05
Title
Epicwin Plugin <= 1.5 - Cross-Site Request Forgery to SQL Injection