WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
events-manager-pro
Published
2020-02-05
Title
Events Manager Pro < 2.6.7.2 - CSV Injection
Slug
events-manager-pro-extended
Published
2024-10-30
Title
Events Manager Pro – extended <= 0.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Slug
events-planner
Published
2025-02-14
Title
Events Planner <= 1.3.10 - Reflected Cross-Site Scripting
Slug
events-search-addon-for-the-events-calendar
Published
2022-04-12
Title
Multiple Plugins from Cool Plugins - Subscriber+ Arbitrary Plugin Installation & Activation
Slug
events-widgets-for-elementor-and-the-events-calendar
Published
2022-04-12
Title
Multiple Plugins from Cool Plugins - Subscriber+ Arbitrary Plugin Installation & Activation
Slug
ever-compare
Published
2023-02-28
Title
Ever Compare < 1.2.4 - Arbitrary Plugin Activation via CSRF
Slug
everest-admin-theme-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
everest-backup
Published
2023-12-29
Title
Everest Backup < 2.2.0 - Sensitive Information Exposure via Log File
Slug
everest-backup
Published
2024-03-25
Title
Everest Backup < 2.2.5 - Admin+ Arbitrary File Upload
Slug
everest-backup
Published
2024-11-05
Title
Everest Backup < 2.2.14 - Unauthenticated Backup Download
Slug
everest-backup
Published
2025-06-05
Title
Everest Backup < 2.3.4 - Cross-Site Request Forgery
Slug
everest-backup
Published
2025-10-10
Title
Everest Backup < 2.3.6 - Missing Authorization to Unauthenticated Information Exposure
Slug
everest-backup
Published
2025-10-10
Title
Everest Backup < 2.3.9 - Missing Authorization
Slug
everest-backup
Published
2025-12-02
Title
Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin < 2.3.9 - Missing Authorization to Unauthenticated Backup Failure
Slug
everest-backup
Published
2025-12-31
Title
Everest Backup <= 2.3.9 - Cross-Site Request Forgery
Slug
everest-coming-soon-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
everest-comment-rating-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
everest-counter-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
everest-faq-manager-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
everest-forms
Published
2019-07-18
Title
Everest Forms < 1.5.0 - SQL Injection
Slug
everest-forms
Published
2021-11-22
Title
Everest Forms < 1.8.0 - Reflected Cross-Site Scripting
Slug
everest-forms
Published
2023-12-27
Title
Everest Forms < 2.0.5 - Admin+ Stored XSS
Slug
everest-forms
Published
2024-03-15
Title
Everest Forms < 2.0.8 - Unauthenticated Server-Side Request Forgery via font_url
Slug
everest-forms
Published
2024-08-01
Title
Everest Forms < 3.0.3.1 - Admin+ Stored XSS
Slug
everest-forms
Published
2024-11-05
Title
Everest Forms < 3.0.4.2 - Admin+ Stored XSS