WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-language-switcher
Published
2024-12-17
Title
Easy Language Switcher <= 1.0 - Reflected Cross-Site Scripting
Slug
easy-liveblogs
Published
2024-11-22
Title
Easy Liveblogs < 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-load-more
Published
2024-09-30
Title
Easy Load More <= 1.0.3 - Reflected Cross-Site Scripting
Slug
easy-login-styler
Published
2024-04-05
Title
Easy Login Styler – White Label Admin Login Page for WordPress <= 1.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
easy-login-woocommerce
Published
2020-05-14
Title
Login/Signup Popup < 1.5 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
easy-login-woocommerce
Published
2021-11-17
Title
Login/Signup Popup < 2.2 - Reflected Cross-Site Scripting
Slug
easy-login-woocommerce
Published
2022-01-13
Title
XootiX Plugins - Various Versions CSRF to Arbitrary Options Update
Slug
easy-login-woocommerce
Published
2023-07-03
Title
Login/Signup Popup < 2.4 - Settings Reset via CSRF
Slug
easy-login-woocommerce
Published
2024-06-05
Title
XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update
Slug
easy-login-woocommerce
Published
2024-06-05
Title
Login/Signup Popup ( Inline Form + Woocommerce ) 2.7.1 - 2.7.2 - Missing Authorization to Arbitrary Options Exposure
Slug
easy-login-woocommerce
Published
2025-02-19
Title
Login/Signup Popup ( Inline Form + Woocommerce ) < 2.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via xoo_el_action Shortcode
Slug
easy-login-woocommerce
Published
2025-06-19
Title
Login/Signup Popup < 2.9.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
easy-maintenance-mode-coming-soon
Published
2024-03-19
Title
Easy Maintenance Mode <= 1.4.2 - Information Exposure
Slug
easy-map-creator
Published
2025-12-11
Title
Easy Map Creator <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
easy-marijuana-age-verify
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-marijuana-age-verify
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-media-download
Published
2020-08-17
Title
Easy Media Download < 1.1.5 - Authenticated Stored Cross-Site Scripting
Slug
easy-media-download
Published
2021-09-22
Title
Easy Media Download < 1.1.7 - Contributor+ Stored Cross-Site Scripting
Slug
easy-media-download
Published
2026-01-08
Title
Easy Media Download < 1.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-media-gallery
Published
2014-08-01
Title
Easy Media Gallery 1.2.25 - includes/emg-settings.php spg_add_admin Function Admin User Creation CSRF
Slug
easy-media-gallery
Published
2015-09-05
Title
Easy Media Gallery < 1.3.50 - Cross Site Scripting (XSS)
Slug
easy-media-gallery
Published
2025-03-31
Title
Gallery – Photo Albums Plugin <= 1.3.170 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
easy-media-gallery-pro
Published
2014-09-17
Title
Easy Media Gallery < 1.3.0 - CSRF & Cross-Site Scripting (XSS)
Slug
easy-media-replace
Published
2023-03-28
Title
Easy Media Replace < 0.2.0 - Author+ File Deletion
Slug
easy-menu-manager-wpzest
Published
2024-10-17
Title
Easy Menu Manager | WPZest <= 1.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload