WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
expandable-paywall
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
expandable-paywall
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
expert-invoice
Published
2024-05-28
Title
Expert Invoice <= 1.0.2 -Admin+ Stored XSS
Slug
experto-cta-widget
Published
2025-05-15
Title
Experto CTA Widget – Call To Action, Sticky CTA, Floating Button Plugin < 1.2.1 - Missing Authorization to Unauthenticated Settings Update
Slug
expire-tags
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
expire-tags
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
explara-events
Published
2024-11-18
Title
Explara Events <= 0.1.3 - Reflected Cross-Site Scripting
Slug
explara-membership
Published
2025-01-16
Title
Explara Membership <= 0.0.7 - Reflected Cross-Site Scripting
Slug
exploit-scanner
Published
2014-08-01
Title
Exploit Scanner <= 1.3.3 - FPD & Security bypass vulnerabilities
Slug
explore-pages
Published
2025-01-16
Title
Explore pages <= 1.01 - Reflected Cross-Site Scripting
Slug
export-all-post-meta
Published
2025-04-01
Title
Export All Post Meta <= 1.2.1 - Missing Authorization
Slug
export-all-urls
Published
2022-03-21
Title
Export All URLs < 4.3 - Private/Draft Post/Page Title Disclosure via CSRF
Slug
export-all-urls
Published
2022-03-21
Title
Export All URLs < 4.2 - Reflected Cross-Site Scripting
Slug
export-all-urls
Published
2022-05-27
Title
Export All URLs < 4.2 - Editor+ Stored Cross-Site Scripting
Slug
export-all-urls
Published
2022-08-08
Title
Export All URLs < 4.4 - Admin+ Arbitrary System File Removal
Slug
export-all-urls
Published
2023-05-10
Title
Export All URLs < 4.2 - Editor+ Stored XSS
Slug
export-all-urls
Published
2023-06-19
Title
Export All URLs < 4.6 - Reflected XSS
Slug
export-categories
Published
2025-10-04
Title
Export Categories <= 1.0 - Missing Authorization
Slug
export-customers-data
Published
2024-12-23
Title
Export Customers Data < 1.2.4 - Reflected Cross-Site Scripting
Slug
export-import-menus
Published
2023-09-04
Title
Export Import Menus < 1.9.0 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
export-import-menus
Published
2025-01-06
Title
Export Import Menus < 1.9.2 - Missing Authorization to Unauthenticated Menu Export
Slug
export-media-urls
Published
2023-12-27
Title
Export Media URLs < 2.0 - Cross-Site Request Forgery
Slug
export-media-urls
Published
2026-02-04
Title
Export Media URLs < 2.3 - Reflected Cross-Site Scripting
Slug
export-post-info
Published
2022-09-08
Title
Export Post Info < 1.2.0 - Admin+ Stored Cross-Site Scripting
Slug
export-post-info
Published
2022-09-22
Title
Export Post Info < 1.2.1 - Author+ CSV Injection