WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-digital-downloads
Published
2024-09-23
Title
Easy Digital Downloads – Simple eCommerce for Selling Digital Files < 3.3.4 - Authenticated (Admin+) PHAR Deserialization
Slug
easy-digital-downloads
Published
2024-12-16
Title
Easy Digital Downloads 3.1 - 3.3.4 - Improper Authorization to Paywall Bypass
Slug
easy-digital-downloads
Published
2024-12-20
Title
Easy Digital Downloads < 3.3.3 - Authenticated (Admin+) Arbitrary File Download
Slug
easy-digital-downloads
Published
2025-01-17
Title
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) < 3.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Title
Slug
easy-digital-downloads
Published
2025-03-24
Title
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy < 3.3.7 - Unauthenticated Private Post Title Disclosure
Slug
easy-digital-downloads
Published
2025-05-28
Title
Easy Digital Downloads < 3.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via edd_receipt Shortcode
Slug
easy-digital-downloads
Published
2025-08-19
Title
Easy Digital Downloads < 3.5.1 - Cross-Site Request Forgery to Plugin Deactivation via edd_sendwp_disconnect and edd_sendwp_remote_install Functions
Slug
easy-digital-downloads
Published
2025-11-05
Title
Easy Digital Download < 3.5.3 - Insufficient Verification to Order Manipulation
Slug
easy-digital-downloads
Published
2025-12-30
Title
Easy Digital Downloads < 3.6.3 - Unvalidated Redirect
Slug
easy-download-media-counter
Published
2025-09-05
Title
Easy Download Media Counter <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-elementor-addons
Published
2025-02-14
Title
Easy Elementor Addons < 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-elementor-addons
Published
2025-02-23
Title
Easy Elementor Addons < 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-elementor-addons
Published
2025-07-16
Title
Easy Elementor Addons < 2.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-elementor-addons
Published
2025-07-30
Title
Easy Elementor Addons < 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-elementor-addons
Published
2025-08-14
Title
Easy Elementor Addons < 2.2.8 - Missing Authorization
Slug
easy-elementor-addons
Published
2025-09-22
Title
Easy Elementor Addons < 2.2.9 - Authenticated (Contributor+) Local File Inclusion
Slug
easy-elementor-addons
Published
2025-10-02
Title
Easy Elementor Addons < 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-elements-hider
Published
2025-07-04
Title
Easy Elements Hider <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
easy-embed-for-youtube-wall
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-eu-cookie-law
Published
2025-01-16
Title
Easy EU Cookie law <= 1.3.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
easy-event-calendar
Published
2023-03-14
Title
Easy Event calendar <= 1.0 - Admin+ Stored XSS
Slug
easy-facebook-like-box
Published
2023-01-25
Title
Easy Social Box < 4.1.3 - Contributor+ Stored XSS via Shortcode
Slug
easy-facebook-likebox
Published
2021-08-16
Title
Easy Social Feed < 6.2.7 - Reflected Cross-Site Scripting (XSS)
Slug
easy-facebook-likebox
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-facebook-likebox
Published
2021-08-12
Title
Easy Social Feed < 6.2.7 - Reflected Cross-Site Scripting