WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-email
Published
2023-07-24
Title
WP-EMail < 2.69.1 - Admin+ Stored Cross-Site Scripting
Slug
wp-email-capture
Published
2023-01-30
Title
WP Email Capture < 3.10 - Admin+ Stored XSS
Slug
wp-email-capture
Published
2023-02-15
Title
WP Email Capture < 3.10 - Email Captures Update via CSRF
Slug
wp-email-capture
Published
2023-03-15
Title
WP Email Capture < 3.11 - Unauthenticated Email Capture Download
Slug
wp-email-capture
Published
2025-12-08
Title
Email Capture < 3.12.5 - Missing Authorization
Slug
wp-email-capture
Published
2025-12-31
Title
Email Capture < 3.12.6 - Cross-Site Request Forgery
Slug
wp-email-debug
Published
2025-06-05
Title
WP Email Debug 1.0 - 1.1.0 - Missing Authorization to Unauthenticated Privilege Escalation via Password Reset
Slug
wp-email-delivery
Published
2025-03-17
Title
WP Email Delivery <= 1.20.11.23 - Reflected XSS
Slug
wp-email-newsletter
Published
2025-01-10
Title
WP Email Newsletter <= 1.1 - Reflected XSS
Slug
wp-email-template
Published
2019-10-25
Title
WP Email Template < 2.2.11 - HTML Injection
Slug
wp-email-template
Published
2025-09-05
Title
WP Email Template <= 2.8.3 - Cross-Site Request Forgery
Slug
wp-email-users
Published
2022-01-31
Title
WP Email Users <= 1.7.6 - Subscriber+ SQL Injection
Slug
wp-embed-facebook
Published
2023-10-27
Title
Magic Embeds < 3.1.2 - Contributor+ Stored XSS via shortcode
Slug
wp-embed-facebook
Published
2025-03-28
Title
Magic Embeds <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-emember
Published
2024-06-22
Title
Wp EMember < 10.6.6 - Authenticated (Admin+) Arbitrary File Upload
Slug
wp-emmet
Published
2025-08-16
Title
WP Emmet <= 0.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-emoji-one
Published
2023-07-19
Title
WP Emoji One <= 0.6.0 - Settings Update via CSRF
Slug
wp-employee-attendance-system
Published
2025-06-12
Title
WP Employee Attendance System <= 3.5 - Authenticated (Administrator+) SQL Injection
Slug
wp-enable-svg
Published
2024-12-11
Title
WP Enabled SVG <= 0.2 - Author+ Stored XSS via SVG
Slug
wp-enable-webp
Published
2026-01-06
Title
WP Enable WebP <= 1.0 - Authenticated (Author+) Arbitrary File Upload
Slug
wp-estimation-form
Published
2024-03-28
Title
WP Cost Estimation & Payment Forms Builder < 10.1.76 - Authenticated (Contributor+) SQL Injection
Slug
wp-estimation-form
Published
2024-04-15
Title
WP Cost Estimation & Payment Forms Builder < 10.1.77 - Missing Authorization
Slug
wp-estimation-form
Published
2024-04-15
Title
WP Cost Estimation & Payment Forms Builder < 10.1.76 - Reflected Cross-Site Scripting
Slug
wp-etracker
Published
2024-05-06
Title
WP etracker <= 1.0.2 - Reflected Cross-Site Scripting
Slug
wp-event-aggregator
Published
2024-04-09
Title
WP Event Aggregator < 1.7.7 - Cross-Site Request Forgery via wpea_deauthorize_user()