WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
expand-maker
Published
2025-02-12
Title
Read More & Accordion < 3.4.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary 'Read More' Post Deletion
Slug
expand-maker
Published
2025-04-04
Title
Read More & Accordion < 3.4.8 - Local File Inclusion via CSRF
Slug
expand-maker
Published
2025-12-15
Title
Read More & Accordion < 3.5.6 - Missing Authorization
Slug
expand-maker
Published
2026-05-19
Title
Read More & Accordion <= 3.5.7 - Privilege Escalation via importData
Slug
expand-maker
Published
2026-05-19
Title
Read More & Accordion <= 3.5.7 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
Slug
expandable-paywall
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
expandable-paywall
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
expert-invoice
Published
2024-05-28
Title
Expert Invoice <= 1.0.2 -Admin+ Stored XSS
Slug
experto-cta-widget
Published
2025-05-15
Title
Experto CTA Widget – Call To Action, Sticky CTA, Floating Button Plugin < 1.2.1 - Missing Authorization to Unauthenticated Settings Update
Slug
experto-custom-dashboard
Published
2026-04-08
Title
Experto Dashboard for WooCommerce < 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Navigation Font Size' Setting
Slug
expire-tags
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
expire-tags
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
expire-users
Published
2026-03-20
Title
Expire Users <= 1.2.2 - Subscriber+ Privilege Escalation
Slug
explara-events
Published
2024-11-18
Title
Explara Events <= 0.1.3 - Reflected Cross-Site Scripting
Slug
explara-membership
Published
2025-01-16
Title
Explara Membership <= 0.0.7 - Reflected Cross-Site Scripting
Slug
exploit-scanner
Published
2014-08-01
Title
Exploit Scanner <= 1.3.3 - FPD & Security bypass vulnerabilities
Slug
explore-pages
Published
2025-01-16
Title
Explore pages <= 1.01 - Reflected Cross-Site Scripting
Slug
export-all-post-meta
Published
2025-04-01
Title
Export All Post Meta <= 1.2.1 - Missing Authorization
Slug
export-all-urls
Published
2022-03-21
Title
Export All URLs < 4.3 - Private/Draft Post/Page Title Disclosure via CSRF
Slug
export-all-urls
Published
2022-03-21
Title
Export All URLs < 4.2 - Reflected Cross-Site Scripting
Slug
export-all-urls
Published
2022-05-27
Title
Export All URLs < 4.2 - Editor+ Stored Cross-Site Scripting
Slug
export-all-urls
Published
2022-08-08
Title
Export All URLs < 4.4 - Admin+ Arbitrary System File Removal
Slug
export-all-urls
Published
2023-05-10
Title
Export All URLs < 4.2 - Editor+ Stored XSS
Slug
export-all-urls
Published
2023-06-19
Title
Export All URLs < 4.6 - Reflected XSS
Slug
export-all-urls
Published
2026-03-11
Title
Export All URLs < 5.1 - Unauthenticated Sensitive Data Exposure