WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-easy-toggles
Published
2025-10-10
Title
WP Easy Toggles <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-easyarchives
Published
2025-12-31
Title
WP-EasyArchives <= 3.1.2 - Cross-Site Request Forgery
Slug
wp-easybooking
Published
2014-04-25
Title
WP Easybooking <= 1.0.3 - XSS
Slug
wp-easycart
Published
2014-08-01
Title
EasyCart 2.0.5 - inc/admin/phpinfo.php Direct Request Remote Information Disclosure
Slug
wp-easycart
Published
2015-02-11
Title
EasyCart <= 3.0.15 - Unrestricted File Upload
Slug
wp-easycart
Published
2015-02-26
Title
EasyCart 1.1.30 - 3.0.20 - Privilege Escalation
Slug
wp-easycart
Published
2021-08-18
Title
Shopping Cart & eCommerce Store < 5.1.1 - CSRF to Stored Cross-Site Scripting
Slug
wp-easycart
Published
2022-03-28
Title
Shopping Cart & eCommerce Store < 5.2.5 - Arbitrary Design Settings Update via CSRF
Slug
wp-easycart
Published
2023-03-13
Title
Shopping Cart & eCommerce Store < 5.4.3 - Admin+ LFI
Slug
wp-easycart
Published
2023-05-27
Title
WP EasyCart < 5.4.9 - Product Deletion via CSRF
Slug
wp-easycart
Published
2023-05-27
Title
WP EasyCart < 5.4.9 - Multiple CSRFs
Slug
wp-easycart
Published
2023-06-08
Title
WP EasyCart < 5.4.11 - Administrator+ Time-based SQL Injection
Slug
wp-easycart
Published
2024-04-11
Title
Shopping Cart & eCommerce Store < 5.6.4 - Contributor+ SQL Injection
Slug
wp-easycart
Published
2024-04-12
Title
WP EasyCart < 5.6.0 - Cross-Site Request Forgery
Slug
wp-easycart
Published
2024-05-10
Title
Shopping Cart & eCommerce Store < 5.6.5 - Sensitive Information Exposure
Slug
wp-easycart
Published
2024-06-03
Title
WP EasyCart < 5.6.0 - Missing Authorization
Slug
wp-easycart
Published
2024-08-19
Title
Shopping Cart & eCommerce Store < 5.7.3 - Authenticated (Contributor+) SQL Injection via model_number Parameter
Slug
wp-easycart
Published
2025-01-07
Title
Shopping Cart & eCommerce Store < 5.7.9 - Missing Authorization to Order Updates
Slug
wp-easycart
Published
2025-12-08
Title
EasyCart < 5.8.12 - Unauthenticated Information Exposure
Slug
wp-easycart
Published
2026-02-27
Title
EasyCart < 5.8.14 - Authenticated (Contributor+) SQL Injection
Slug
wp-easycart
Published
2026-07-02
Title
Shopping Cart & eCommerce Store < 5.9.2 - Authenticated (Contributor+) SQL Injection
Slug
wp-easycart
Published
2026-09-23
Title
Shopping Cart & eCommerce Store < 6.0.0 - Authenticated (Contributor+) SQL Injection
Slug
wp-easycart
Published
2026-08-31
Title
Shopping Cart & eCommerce Store < 5.9.3 - Authenticated (Administrator+) SQL Injection via 'product_order' Parameter
Slug
wp-easycart
Published
2026-09-08
Title
Shopping Cart & eCommerce Store < 5.9.4 - Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX Action
Slug
wp-ecards-invites
Published
2024-12-03
Title
WP eCards < 1.3.905 - Authenticated (Contributor+) Stored Cross-Site Scripting