WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
et-core-plugin
Published
2024-04-25
Title
XStore Core <= 5.3.5 - Authenticated (Subscriber+) Limited Arbitrary File Download
Slug
et-core-plugin
Published
2024-04-25
Title
XStore Core <= 5.3.5 - Unauthenticated PHP Object Injection
Slug
et-core-plugin
Published
2025-10-17
Title
XStore Core < 5.6 - Reflected Cross-Site Scripting
Slug
et-core-plugin
Published
2025-12-30
Title
XStore Core < 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
et-core-plugin
Published
2026-03-17
Title
XStore Core < 5.6.5 - Reflected Cross-Site Scripting
Slug
et-mailing
Published
2025-10-15
Title
ET Mailing <= 1.0.0 - Subscriber+ Arbitrary Option Update
Slug
etemplates
Published
2024-12-14
Title
eTemplates <= 0.2.1 - Unauthenticated SQL Injection
Slug
ether-and-erc20-tokens-woocommerce-payment-gateway
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ether-and-erc20-tokens-woocommerce-payment-gateway
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ethereum-wallet
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ethereum-wallet
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ethereumico
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ethereumico
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ethereumico
Published
2025-01-29
Title
EthereumICO < 2.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via ethereum-ico Shortcode
Slug
ethiopian-calendar
Published
2025-03-31
Title
Ethiopian Calendar <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ethpress
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ethpress
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
etruel-del-post-copies
Published
2025-01-07
Title
WP Delete Post Copies < 6.0 - Missing Authorization
Slug
etruel-del-post-copies
Published
2025-11-20
Title
WP Delete Post Copies < 6.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
etsy-importer
Published
2025-01-24
Title
Etsy Importer <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
etsy-shop
Published
2023-10-11
Title
Etsy Shop < 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
etsy-shop
Published
2025-09-01
Title
Etsy Shop < 3.0.7 - Reflected XSS via $_SERVER['REQUEST_URI']
Slug
eu-cookie-law
Published
2019-10-16
Title
EU Cookie Law < 3.1.3 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
eu-cookie-law
Published
2022-12-27
Title
EU Cookie Law <= 3.1.6 - Admin+ Stored XSS
Slug
eu-vat-for-woocommerce
Published
2024-08-29
Title
EU/UK VAT Manager for WooCommerce < 3.0.0 - Reflected Cross-Site Scripting