WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-easy-gallery
Published
2024-09-23
Title
WP Easy Gallery – WordPress Gallery Plugin <= 4.8.5 - Authenticated (Subscriber+) SQL Injection
Slug
wp-easy-gallery
Published
2024-09-30
Title
WP Easy Gallery <= 4.8.5 - Authenticated (Contributor+) SQL Injection via key Parameter
Slug
wp-easy-guide
Published
2025-04-25
Title
Easy Guide <= 1.0.0 - Unauthenticated SQL Injection
Slug
wp-easy-menu
Published
2025-04-09
Title
WP-Easy Menu <= 0.41 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-easy-pay
Published
2021-07-05
Title
CSRF Bypass in Multiple Plugins
Slug
wp-easy-pay
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-easy-pay
Published
2023-05-01
Title
WP EasyPay < 4.1 - Reflected Cross-Site Scripting
Slug
wp-easy-pay
Published
2023-04-14
Title
WP EasyPay < 4.1 - CSRF
Slug
wp-easy-pay
Published
2021-07-05
Title
WP EasyPay – Square for WordPress < 3.2.3 - Cross-Site Request Forgery
Slug
wp-easy-pay
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-easy-pay
Published
2024-07-23
Title
WP Easy Pay (Free) < 4.2.4 - Missing Authorization to Unauthenticated Service Disconnection
Slug
wp-easy-poll-afo
Published
2015-12-09
Title
WP Easy Poll <= 1.1.3 - Cross-Site Scripting (XSS) & CSRF
Slug
wp-easy-poll-afo
Published
2025-04-11
Title
WP Easy Poll <= 2.2.9 - Reflected Cross-Site Scripting
Slug
wp-easy-recipe
Published
2024-10-31
Title
WP EASY RECIPE <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-easy-slideshow
Published
2015-04-02
Title
WP Easy Slideshow <= 1.0.3 - Multiple Cross-Site Request Forgery (CSRF)
Slug
wp-easy-toggles
Published
2025-10-10
Title
WP Easy Toggles <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-easyarchives
Published
2025-12-31
Title
WP-EasyArchives <= 3.1.2 - Cross-Site Request Forgery
Slug
wp-easybooking
Published
2014-04-25
Title
WP Easybooking <= 1.0.3 - XSS
Slug
wp-easycart
Published
2014-08-01
Title
EasyCart 2.0.5 - inc/admin/phpinfo.php Direct Request Remote Information Disclosure
Slug
wp-easycart
Published
2015-02-11
Title
EasyCart <= 3.0.15 - Unrestricted File Upload
Slug
wp-easycart
Published
2015-02-26
Title
EasyCart 1.1.30 - 3.0.20 - Privilege Escalation
Slug
wp-easycart
Published
2021-08-18
Title
Shopping Cart & eCommerce Store < 5.1.1 - CSRF to Stored Cross-Site Scripting
Slug
wp-easycart
Published
2022-03-28
Title
Shopping Cart & eCommerce Store < 5.2.5 - Arbitrary Design Settings Update via CSRF
Slug
wp-easycart
Published
2023-03-13
Title
Shopping Cart & eCommerce Store < 5.4.3 - Admin+ LFI
Slug
wp-easycart
Published
2023-05-27
Title
WP EasyCart < 5.4.9 - Product Deletion via CSRF