WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
eu-vat-for-woocommerce
Published
2024-09-27
Title
EU/UK VAT Manager for WooCommerce < 2.12.14 - Reflected Cross-Site Scripting
Slug
eu-vat-for-woocommerce
Published
2024-09-27
Title
EU/UK VAT Manager for WooCommerce < 2.12.14 - Missing Authorization
Slug
eucookielaw
Published
2025-05-08
Title
EUCookieLaw < 2.7.3 - Unauthenticated Arbitrary File Read
Slug
eupago-gateway-for-woocommerce
Published
2023-10-16
Title
Eupago Gateway For Woocommerce < 3.1.10 - CSRF
Slug
eupago-gateway-for-woocommerce
Published
2025-12-08
Title
Eupago Gateway For Woocommerce <= 4.7.1 - Missing Authorization
Slug
euro-fxref-currency-converter
Published
2025-06-19
Title
Euro FxRef Currency Converter < 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via currency Shortcode
Slug
evaluate
Published
2022-10-29
Title
Evaluate <= 1.0 - Admin+ Stored Cross-Site Scripting
Slug
evangtermine
Published
2025-06-23
Title
Evangelische Termine <= 3.3 - Reflected Cross-Site Scripting
Slug
evarisk
Published
2014-08-01
Title
Evarisk 5.1.5.4 - include/lib/actionsCorrectives/activite/uploadPhotoApres.php File Upload PHP Code Execution
Slug
evarisk
Published
2014-08-01
Title
Evarisk <= 5.1.3.6 - SQL Injection
Slug
eveeno
Published
2024-12-13
Title
Eveeno < 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
evenium
Published
2025-09-10
Title
Evenium <= 1.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-calendar-wd
Published
2017-06-06
Title
Event Calendar WD <= 1.0.93 - Authenticated Cross-Site Scripting (XSS)
Slug
event-calendar-wd
Published
2018-11-02
Title
Event Calendar WD <= 1.1.21 - Cross-Site Scripting (XSS)
Slug
event-calendar-wd
Published
2021-06-01
Title
Event Calendar WD < 1.1.45 - Cross-Site Scripting (XSS)
Slug
event-calendar-wd
Published
2021-06-25
Title
Event Calendar WD < 1.1.46 - Cross-Site Scripting (XSS)
Slug
event-calendar-wd
Published
2021-12-20
Title
Event Calendar < 1.1.51 - Reflected Cross-Site Scripting
Slug
event-calendar-wd
Published
2021-12-20
Title
Event Calendar < 1.1.51 - Subscriber+ Event Creation
Slug
event-calendars
Published
2024-09-10
Title
Event Calendar <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion
Slug
event-countdown-timer
Published
2025-01-16
Title
Event Countdown Timer Plugin by TechMix <= 1.4 - Reflected Cross-Site Scripting
Slug
event-easy-calendar
Published
2014-08-01
Title
Event Easy Calendar 1.0.0 - Multiple Administrator Action CSRF
Slug
event-easy-calendar
Published
2014-08-01
Title
Event Easy Calendar 1.0.0 - Multiple Unspecified XSS
Slug
event-espresso-core-reg
Published
2021-06-25
Title
Event Espresso Core < 4.10.7.p - Reflected Cross-Site Scripting (XSS)
Slug
event-espresso-decaf
Published
2021-08-16
Title
Multiple Plugins - CSRF Bypass
Slug
event-espresso-decaf
Published
2021-08-16
Title
Event Espresso 4 Decaf < 4.10.12 - Cross-Site Request Forgery