WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
empik-for-woocommerce
Published
2025-04-10
Title
EmpikPlace for Woocommerce < 1.4.5 - Authenticated (Subscriber+) PHP Object Injection
Slug
empik-for-woocommerce
Published
2026-09-18
Title
Empik for Woocommerce < 1.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Product Meta Update via empik_csv_process_emp_log_classes AJAX Action
Slug
emplibot
Published
2025-12-12
Title
Emplibot – AI Content Writer with Keyword Research, Infographics, and Linking | SEO Optimized | Fully Automated < 1.1.0 - Authenticated (Admin+) Server-Side Request Forgery
Slug
employee-directory
Published
2025-06-03
Title
Staff Directory – Employee Directory for WordPress < 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
employee-directory
Published
2025-08-04
Title
Employee Directory < 4.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter
Slug
employee-directory
Published
2025-08-25
Title
Employee Directory – Staff Listing & Team Directory Plugin for WordPress < 4.5.6 - Unauthenticated PHP Object Injection
Slug
employee-spotlight
Published
2025-08-25
Title
Employee Spotlight < 5.1.2 - Unauthenticated PHP Object Injection
Slug
employee-spotlight
Published
2025-09-23
Title
Multiple Plugins by eMarket Design <= Various Versions - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
employee-spotlight
Published
2025-10-31
Title
Employee Spotlight – Team Member Showcase & Meet the Team Plugin < 5.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
employee-spotlight
Published
2025-12-12
Title
Employee Spotlight – Team Member Showcase & Meet the Team Plugin < 5.1.4 - Missing Authorization to Authenticated (Subscriber+) Tracking Opt-In/Opt-Out Modification
Slug
employee-staff-directory
Published
2026-02-05
Title
Employee Directory < 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'form_title' Shortcode Attribute
Slug
empty-cart-button-for-woocommerce
Published
2024-06-21
Title
Empty Cart Button for WooCommerce <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
empty-tags-remover
Published
2025-01-20
Title
Empty Tags Remover < 1.1.0 - Reflected Cross-Site Scripting
Slug
emu2-email-users-2
Published
2025-08-16
Title
Emu2 <= 0.83b - Reflected Cross-Site Scripting
Slug
en-masse-wp
Published
2025-03-19
Title
En Masse <= 1.0 - Reflected Cross-Site Scripting
Slug
enable-accessibility
Published
2023-04-13
Title
Enable Accessibility <= 1.4 - CSRF
Slug
enable-accessibility
Published
2025-01-06
Title
Enable Accessibility <= 1.4.1 - Reflected Cross-Site Scripting
Slug
enable-cors
Published
2026-06-18
Title
Enable CORS < 2.0.4 - Backdoor
Slug
enable-jquery-migrate-helper
Published
2026-05-26
Title
Enable jQuery Migrate Helper <= 1.4.1 - Missing Authorization to Authenticated (Subscriber+) jQuery Version Downgrade
Slug
enable-latex
Published
2025-09-05
Title
Enable Latex <= 1.2.16 - Cross-Site Request Forgery
Slug
enable-media-replace
Published
2014-08-01
Title
Enable Media Replace <= 2.3 - Multiple Vulnerabilities
Slug
enable-media-replace
Published
2022-09-14
Title
Enable Media Replace < 4.0.0 - Admin+ Path Traversal
Slug
enable-media-replace
Published
2023-01-17
Title
Enable Media Replace < 4.0.2 - Author+ Arbitrary File Upload
Slug
enable-media-replace
Published
2023-09-21
Title
Enable Media Replace < 4.1.3 - Author+ PHP Object Injection
Slug
enable-media-replace
Published
2023-12-18
Title
Enable Media Replace < 4.1.5 - Reflected Cross-Site Scripting