WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
estatik
Published
2023-12-25
Title
Estatik Real Estate Plugin < 4.1.1 - Subscriber+ Arbitrary Option Update
Slug
estatik
Published
2025-02-23
Title
Estatik <= 4.3.0 - Contributor+ Local File Inclusion
Slug
estatik
Published
2025-10-16
Title
Estatik <= 4.3.0 - Contributor+ Stored XSS
Slug
estatik-mortgage-calculator
Published
2023-03-16
Title
Mortgage Calculator Estatik <= 2.0.12 - Reflected XSS
Slug
estatik-mortgage-calculator
Published
2023-08-17
Title
Mortgage Calculator Estatik <= 2.0.12 - Reflected XSS
Slug
estatik-mortgage-calculator
Published
2025-01-06
Title
Estatik Mortgage Calculator < 2.0.12 - Reflected Cross-Site Scripting
Slug
estatik-mortgage-calculator
Published
2025-02-23
Title
Estatik Mortgage Calculator <= 2.0.12 - Authenticated (Contributor+) Local File Inclusion
Slug
estatik-mortgage-calculator
Published
2025-05-16
Title
Mortgage Calculator Estatik <= 2.0.12 - Authenticated (Contributor+) Local File Inclusion
Slug
estonian-shipping-methods-for-woocommerce
Published
2025-09-22
Title
Estonian Shipping Methods for WooCommerce <= 1.7.2 - Unauthenticated Sensitive Information Exposure
Slug
esv-bible-shortcode-for-wordpress
Published
2025-06-05
Title
ESV Bible Shortcode for WordPress <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
et-core-plugin
Published
2024-04-25
Title
XStore Core <= 5.3.5 - Reflected Cross-Site Scripting
Slug
et-core-plugin
Published
2024-04-25
Title
XStore Core <= 5.3.5 - Unauthenticated SQL Injection
Slug
et-core-plugin
Published
2024-04-25
Title
XStore Core <= 5.3.5 - Authenticated (Subscriber+) Limited Arbitrary File Upload
Slug
et-core-plugin
Published
2024-04-25
Title
XStore Core <= 5.3.5 - Missing Authorization
Slug
et-core-plugin
Published
2024-04-25
Title
XStore Core <= 5.3.5 - Unauthenticated Privilege Escalation
Slug
et-core-plugin
Published
2024-04-25
Title
XStore Core <= 5.3.5 - Authenticated (Subscriber+) Local File Inclusion
Slug
et-core-plugin
Published
2024-04-25
Title
XStore Core <= 5.3.5 - Authenticated (Subscriber+) Limited Arbitrary File Download
Slug
et-core-plugin
Published
2024-04-25
Title
XStore Core <= 5.3.5 - Unauthenticated PHP Object Injection
Slug
et-core-plugin
Published
2025-10-17
Title
XStore Core < 5.6 - Reflected Cross-Site Scripting
Slug
et-core-plugin
Published
2025-12-30
Title
XStore Core < 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
et-mailing
Published
2025-10-15
Title
ET Mailing <= 1.0.0 - Subscriber+ Arbitrary Option Update
Slug
etemplates
Published
2024-12-14
Title
eTemplates <= 0.2.1 - Unauthenticated SQL Injection
Slug
ether-and-erc20-tokens-woocommerce-payment-gateway
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ether-and-erc20-tokens-woocommerce-payment-gateway
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ethereum-wallet
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius