WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
eri-file-library
Published
2025-10-30
Title
ERI File Library < 1.1.1 - Missing Authorization to Unauthenticated Protected File Download
Slug
erident-custom-login-and-dashboard
Published
2015-06-18
Title
Erident Custom Login & Dashboard 3.4-3.4.1 - Stored Cross-Site Scripting (XSS)
Slug
erident-custom-login-and-dashboard
Published
2015-06-10
Title
Erident Custom Login & Dashboard < 3.5 - Unspecified CSRF
Slug
erident-custom-login-and-dashboard
Published
2021-04-01
Title
Erident Custom Login and Dashboard < 3.5.9 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
erima-zarinpal-donate
Published
2025-02-24
Title
Erima Zarinpal Donate <= 1.0 - Cross-Site Request Forgery
Slug
erocket
Published
2023-04-21
Title
eRocket < 1.2.5 - Admin+ Stored XSS
Slug
eroom-zoom-meetings-webinar
Published
2022-04-11
Title
eRoom < 1.3.9 - Cache Deletion via CSRF
Slug
eroom-zoom-meetings-webinar
Published
2022-04-11
Title
eRoom < 1.3.8 - Sync Meetings via CSRF
Slug
eroom-zoom-meetings-webinar
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
eroom-zoom-meetings-webinar
Published
2024-04-12
Title
eRoom – Zoom Meetings & Webinar < 1.4.19 - Missing Authorization to Information Exposure
Slug
eroom-zoom-meetings-webinar
Published
2025-10-24
Title
eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams < 1.5.7 - Unauthenticated Sensitive Information Exposure
Slug
eroom-zoom-meetings-webinar
Published
2025-11-26
Title
eRoom < 1.5.7 - Unauthenticated Information Exposure
Slug
eroom-zoom-meetings-webinar
Published
2026-07-22
Title
eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.7.1 - Missing Authorization
Slug
eroom-zoom-meetings-webinar
Published
2026-07-22
Title
eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.7.1 - Authenticated (Contributor+) SQL Injection
Slug
erp
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
erp
Published
2021-03-01
Title
Multiple Plugins - CSRF Nonce Bypasses
Slug
erp
Published
2023-06-05
Title
WP ERP < 1.12.4 - Reflected Cross-Site Scripting
Slug
erp
Published
2023-06-05
Title
WP ERP < 1.12.4 - Admin+ SQL Injection
Slug
erp
Published
2020-09-26
Title
WP ERP < 1.6.4 - Cross-Site Request Forgery
Slug
erp
Published
2023-10-12
Title
WP ERP < 1.12.7 - Missing Authorization via admin notice dismissal
Slug
erp
Published
2024-01-05
Title
WP ERP < 1.12.9 - Authenticated (Accounting manager+) SQL Injection
Slug
erp
Published
2024-03-28
Title
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.12.9 - Unauthenticated Stored Cross-Site Scripting
Slug
erp
Published
2024-03-28
Title
WP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection
Slug
erp
Published
2024-03-28
Title
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.12.9 - Authenticated (Subscriber+) SQL Injection
Slug
erp
Published
2024-03-28
Title
WP ERP <= 1.12.9 - Authenticated (AccountingManager+) SQL Injection