WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
erp
Published
2026-07-08
Title
ERP: Complete HR, Accounting & CRM Suite with Recruitment and WooCommerce CRM Support < 1.17.6 - Authenticated (HR Manager+) SQL Injection via 'orderby' Parameter
Slug
erp
Published
2026-07-16
Title
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce < 1.17.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Company Location Creation via wp_ajax_erp-company-location AJAX Handler
Slug
erp
Published
2026-07-15
Title
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce < 1.17.6 - Missing Authorization
Slug
erp-pro
Published
2026-05-21
Title
WP ERP Pro <= 1.5.1 - Unauthenticated SQL Injection via 'search_key' Parameter
Slug
err-our-team
Published
2025-08-14
Title
Inpersttion For Theme <= 1.0 - Authenticated (Contributor+) Arbitrary Function Call
Slug
error-log-monitor
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
error-log-monitor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
error-log-monitor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
error-log-viewer
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
error-log-viewer
Published
2021-12-29
Title
Error Log Viewer < 1.1.2 - Arbitrary Text File Deletion via CSRF
Slug
error-log-viewer
Published
2021-11-10
Title
Error Log Viewer Plugin < 1.1.2 - Admin+ Arbitrary File Clearing
Slug
error-log-viewer
Published
2024-02-20
Title
Error Log Viewer < 1.1.3 - Directory Listing to Sensitive Data Exposure
Slug
error-log-viewer
Published
2025-10-10
Title
Error Log Viewer by BestWebSoft < 1.1.7 - Authenticated (Administrator+) Arbitrary File Read
Slug
error-log-viewer-wp
Published
2025-01-06
Title
Error Log Viewer By WP Guru < 1.0.4 - Missing Authorization to Unauthenticated Arbitrary File Read
Slug
error-log-viewer-wp
Published
2025-04-09
Title
Error Log Viewer <= 1.0.5 - Authenticated (Subscriber+) SQL Injection
Slug
error-notification
Published
2025-01-16
Title
Error Notification <= 0.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
esb-testimonials
Published
2024-11-08
Title
ESB Testimonials <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
eshipper-commerce
Published
2026-02-23
Title
eShipper Commerce < 2.16.13 - Missing Authorization
Slug
eshop
Published
2014-08-01
Title
eShop - wp-admin/admin.php Multiple Parameter XSS
Slug
eshop
Published
2015-05-06
Title
eShop <= 6.3.11 - Remote Code Execution
Slug
eshop
Published
2015-09-09
Title
eShop - Reflected Cross-Site Scripting (XSS) & CSRF
Slug
eshop
Published
2016-02-02
Title
eShop - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
eshop
Published
2016-02-02
Title
eShop - Authenticated Blind SQL Injection
Slug
eshop-magic
Published
2014-08-01
Title
eShop Magic 0.1 - eshop-magic/download.php file Parameter Traversal Arbitrary File Access
Slug
esign-genie-for-wp
Published
2025-06-05
Title
Foxit eSign for WordPress <= 2.0.3 - Authenticated (Admin+) Information Exposure