WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
estatik
Published
2016-08-01
Title
Estatik < 2.3.1 - Arbitrary File Upload
Slug
estatik
Published
2023-12-25
Title
Estatik Real Estate Plugin < 4.1.1 - Unauthenticated PHP Object Injection
Slug
estatik
Published
2023-12-25
Title
Estatik Real Estate Plugin < 4.1.1 - Reflected XSS
Slug
estatik
Published
2023-12-25
Title
Estatik Real Estate Plugin < 4.1.1 - Subscriber+ Arbitrary Option Update
Slug
estatik
Published
2025-02-23
Title
Estatik < 4.3.2 - Contributor+ Local File Inclusion
Slug
estatik
Published
2025-10-16
Title
Estatik <= 4.3.5 - Contributor+ Stored XSS
Slug
estatik
Published
2026-07-30
Title
Estatik Real Estate Plugin < 4.3.3 - Unauthenticated Arbitrary-Recipient Mail Relay via Request Form
Slug
estatik
Published
2026-08-03
Title
Estatik < 4.3.3 - Login CSRF
Slug
estatik
Published
2026-08-06
Title
Estatik Real Estate Plugin < 4.3.4 - Unauthenticated Arbitrary-Recipient Mail Relay via Signed-Value Mismatch
Slug
estatik
Published
2026-09-02
Title
Estatik Real Estate Plugin <= 4.3.4 - Unauthenticated Stored Cross-Site Scripting
Slug
estatik-mortgage-calculator
Published
2023-03-16
Title
Mortgage Calculator Estatik <= 2.0.12 - Reflected XSS
Slug
estatik-mortgage-calculator
Published
2023-08-17
Title
Mortgage Calculator Estatik <= 2.0.12 - Reflected XSS
Slug
estatik-mortgage-calculator
Published
2025-01-06
Title
Estatik Mortgage Calculator < 2.0.12 - Reflected Cross-Site Scripting
Slug
estatik-mortgage-calculator
Published
2025-02-23
Title
Estatik Mortgage Calculator <= 2.0.12 - Authenticated (Contributor+) Local File Inclusion
Slug
estatik-mortgage-calculator
Published
2025-05-16
Title
Mortgage Calculator Estatik <= 2.0.12 - Authenticated (Contributor+) Local File Inclusion
Slug
estonian-shipping-methods-for-woocommerce
Published
2025-09-22
Title
Estonian Shipping Methods for WooCommerce <= 1.7.2 - Unauthenticated Sensitive Information Exposure
Slug
esv-bible-shortcode-for-wordpress
Published
2025-06-05
Title
ESV Bible Shortcode for WordPress <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
et-core-plugin
Published
2024-04-25
Title
XStore Core <= 5.3.5 - Reflected Cross-Site Scripting
Slug
et-core-plugin
Published
2024-04-25
Title
XStore Core < 5.3.9 - Unauthenticated SQL Injection
Slug
et-core-plugin
Published
2024-04-25
Title
XStore Core <= 5.3.5 - Authenticated (Subscriber+) Limited Arbitrary File Upload
Slug
et-core-plugin
Published
2024-04-25
Title
XStore Core <= 5.3.5 - Missing Authorization
Slug
et-core-plugin
Published
2024-04-25
Title
XStore Core < 5.3.9 - Unauthenticated Privilege Escalation
Slug
et-core-plugin
Published
2024-04-25
Title
XStore Core <= 5.3.5 - Authenticated (Subscriber+) Local File Inclusion
Slug
et-core-plugin
Published
2024-04-25
Title
XStore Core <= 5.3.5 - Authenticated (Subscriber+) Limited Arbitrary File Download
Slug
et-core-plugin
Published
2024-04-25
Title
XStore Core <= 5.3.5 - Unauthenticated PHP Object Injection