WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
everse-starter-sites
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
everviz
Published
2025-11-17
Title
everviz <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ewww-image-optimizer
Published
2014-10-09
Title
EWWW Image Optimizer 2.0.1 - Cross-Site Scripting (XSS)
Slug
ewww-image-optimizer
Published
2016-06-09
Title
EWWW Image Optimizer <= 2.8.3 - Remote Code Execution
Slug
ewww-image-optimizer
Published
2020-09-06
Title
EWWW Image Optimizer < 5.9 - Cross-Site Request Forgery
Slug
ewww-image-optimizer
Published
2023-11-14
Title
EWWW Image Optimizer < 7.2.1 - Unauthenticated Sensitive Information Exposure via Debug Log
Slug
ewww-image-optimizer
Published
2023-09-08
Title
EWWW Image Optimizer < 7.2.1 - Sensitive Information Exposure
Slug
ewww-image-optimizer
Published
2024-04-10
Title
EWWW Image Optimizer < 7.3.0 - Cross-Site Request Forgery
Slug
exact-links
Published
2025-07-04
Title
URL Shortener <= 3.0.7 - Unauthenticated Server-Side Request Forgery
Slug
exact-links
Published
2025-07-11
Title
URL Shortener <= 3.0.7 - Unauthenticated SQL Injection
Slug
exact-links
Published
2025-07-11
Title
URL Shortener <= 3.0.7 - Unauthenticated PHP Object Injection
Slug
exact-links
Published
2025-07-15
Title
URL Shortener <= 3.0.7 - Missing Authorization
Slug
exact-links
Published
2025-10-23
Title
URL Shortener Plugin For WordPress <= 3.0.7 - Missing Authorization to Authenticated (Subscriber+) Link Manipulation
Slug
exact-links
Published
2025-12-12
Title
URL Shortener Plugin For WordPress <= 3.0.7 - Unauthenticated SQL Injection
Slug
exam-matrix
Published
2024-10-25
Title
Exam Matrix <= 1.5 - Unauthenticated Privilege Escalation
Slug
examapp
Published
2017-07-21
Title
WordPress Plugin IBPS Online Exam <= 1.0 - Authenticated SQL Injection / Cross-Site Scripting
Slug
excel-like-price-change-for-woocommerce-and-wp-e-commerce-light
Published
2025-04-21
Title
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated Local File Inclusion
Slug
excel-like-price-change-for-woocommerce-and-wp-e-commerce-light
Published
2025-05-21
Title
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated Remote Code Execution
Slug
excel-like-price-change-for-woocommerce-and-wp-e-commerce-light
Published
2025-05-20
Title
Spreadsheet Price Changer for WooCommerce and WP E-commerce <= 2.4.37 - Unauthenticated Privilege Escalation
Slug
excel-like-price-change-for-woocommerce-and-wp-e-commerce-light
Published
2025-05-30
Title
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated Arbitrary File Download
Slug
excel-like-price-change-for-woocommerce-and-wp-e-commerce-light
Published
2025-06-03
Title
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated SQL Injection
Slug
exchange-addon-2checkout
Published
2015-04-20
Title
Multiple iThemes plugins, themes and add-ons - XSS via add_query_arg() and remove_query_arg()
Slug
exchange-addon-authorize-net
Published
2015-04-20
Title
Multiple iThemes plugins, themes and add-ons - XSS via add_query_arg() and remove_query_arg()
Slug
exchange-addon-custom-url-tracking
Published
2015-04-20
Title
Multiple iThemes plugins, themes and add-ons - XSS via add_query_arg() and remove_query_arg()
Slug
exchange-addon-easy-canadian-sales-taxes
Published
2015-04-20
Title
Multiple iThemes plugins, themes and add-ons - XSS via add_query_arg() and remove_query_arg()