Vulnerabilities

Filters

1 selected

35 records

Sort

Vendor: e-plugins Clear all filters

TI-2026-47320 CVE-2026-66649 · GHSA-rg68-729g-x9vg

WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in Directory Pro <= 2.5.8 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.004 Published 2026-08-20 No fix listed CWE-89

TI-2026-22468 CVE-2026-28127 · GHSA-j88x-2343-7fw2

WordPress Lawyer Directory plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Lawyer Directory lawyer-directory allows Reflected XSS.This issue affects Lawyer Directory: from n/a through…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00174 Published 2026-03-05 No fix listed CWE-79

TI-2026-21811 CVE-2026-27396 · GHSA-42h9-8hc3-f63j

WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directory Pro: from n/a through <= 2.5.6.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00254 Published 2026-03-05 No fix listed CWE-862

TI-2025-42736 CVE-2025-69293 · GHSA-6hh3-55pq-pgwq

WordPress Final User plugin <= 1.2.5 - Privilege Escalation vulnerability

MEDIUM 40

Incorrect Privilege Assignment vulnerability in e-plugins Final User final-user allows Privilege Escalation.This issue affects Final User: from n/a through <= 1.2.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0033 Published 2026-01-22 No fix listed CWE-266

TI-2025-42735 CVE-2025-69292 · GHSA-hf3g-728j-f82r

WordPress WP Membership plugin <= 1.6.4 - Privilege Escalation vulnerability

MEDIUM 40

Incorrect Privilege Assignment vulnerability in e-plugins WP Membership wp-membership allows Privilege Escalation.This issue affects WP Membership: from n/a through <= 1.6.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0033 Published 2026-01-22 No fix listed CWE-266

TI-2025-42647 CVE-2025-69193 · GHSA-h64p-6rr7-5p56

WordPress WP Membership plugin <= 1.6.4 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in e-plugins WP Membership wp-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Membership: from n/a through <= 1.6.4.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.0026 Published 2026-01-22 No fix listed CWE-862

TI-2025-42646 CVE-2025-69192 · GHSA-fmw4-xvm4-wcm8

WordPress Real Estate Pro plugin <= 2.1.5 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in e-plugins Real Estate Pro real-estate-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real Estate Pro: from n/a through <= 2.1.5.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.0026 Published 2026-01-22 No fix listed CWE-862

TI-2025-42645 CVE-2025-69191 · GHSA-466m-cgr3-wmg5

WordPress ListingHub plugin <= 1.2.7 - Broken Access Control vulnerability

LOW 34

Missing Authorization vulnerability in e-plugins ListingHub listinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingHub: from n/a through <= 1.2.7.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.0026 Published 2026-01-22 No fix listed CWE-862

TI-2025-42644 CVE-2025-69190 · GHSA-j5mh-gg3g-q7rr

WordPress Listihub theme <= 1.0.6 - Broken Access Control vulnerability

LOW 34

Missing Authorization vulnerability in e-plugins Listihub listihub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Listihub: from n/a through <= 1.0.6.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.0026 Published 2026-01-22 No fix listed CWE-862

TI-2025-42642 CVE-2025-69188 · GHSA-pxq9-fqh3-52fg

WordPress fitness-trainer plugin <= 1.7.1 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in e-plugins fitness-trainer fitness-trainer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects fitness-trainer: from n/a through <= 1.7.1.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.0026 Published 2026-01-22 No fix listed CWE-862

TI-2025-42641 CVE-2025-69187 · GHSA-w658-c477-fhp4

WordPress Final User plugin <= 1.2.5 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in e-plugins Final User final-user allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Final User: from n/a through <= 1.2.5.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.0026 Published 2026-01-22 No fix listed CWE-862

TI-2025-42640 CVE-2025-69186 · GHSA-jmqh-4qjh-82jv

WordPress Hospital Doctor Directory plugin <= 1.3.9 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hospital Doctor Directory: f…

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.0026 Published 2026-01-22 No fix listed CWE-862

TI-2025-42639 CVE-2025-69185 · GHSA-wgvv-cr52-g6p9

WordPress Hotel Listing plugin <= 1.4.2 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in e-plugins Hotel Listing hotel-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hotel Listing: from n/a through <= 1.4.2.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.0026 Published 2026-01-22 No fix listed CWE-862

TI-2025-42638 CVE-2025-69184 · GHSA-3mf6-3q6q-vqgr

WordPress Institutions Directory plugin <= 1.3.4 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Institutions Directory: from n/a t…

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.0026 Published 2026-01-22 No fix listed CWE-862

TI-2025-42637 CVE-2025-69183 · GHSA-gv86-fjr8-gfwc

WordPress Hospital Doctor Directory plugin <= 1.3.9 - Privilege Escalation vulnerability

MEDIUM 40

Incorrect Privilege Assignment vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Privilege Escalation.This issue affects Hospital Doctor Directory: from n/a through <= 1.3.9.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00449 Published 2026-01-22 No fix listed CWE-266

TI-2025-42636 CVE-2025-69182 · GHSA-492m-9864-4xjr

WordPress Institutions Directory plugin <= 1.3.4 - Privilege Escalation vulnerability

MEDIUM 40

Incorrect Privilege Assignment vulnerability in e-plugins Institutions Directory institutions-directory allows Privilege Escalation.This issue affects Institutions Directory: from n/a through <= 1.3.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00449 Published 2026-01-22 No fix listed CWE-266

TI-2025-42635 CVE-2025-69181 · GHSA-hrjh-p83q-8hg5

WordPress Lawyer Directory plugin <= 1.3.4 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lawyer Directory: from n/a through <= 1.3.4.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00342 Published 2026-01-22 No fix listed CWE-862

TI-2025-42511 CVE-2025-69056 · GHSA-xv32-hwgf-r7x9

WordPress Hotel Listing plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Hotel Listing hotel-listing allows Reflected XSS.This issue affects Hotel Listing: from n/a through <= 1.4.0…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00219 Published 2026-01-22 No fix listed CWE-79

TI-2025-41668 CVE-2025-68059 · GHSA-jmqj-4fvj-6c9g

WordPress Hotel Listing plugin <= 1.4.2 - Broken Access Control vulnerability

LOW 33

Missing Authorization vulnerability in e-plugins Hotel Listing hotel-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hotel Listing: from n/a through <= 1.4.2.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00361 Published 2026-01-22 No fix listed CWE-862

TI-2025-41667 CVE-2025-68058 · GHSA-539g-jjhg-mch4

WordPress Institutions Directory plugin <= 1.3..4 - Broken Access Control vulnerability

LOW 33

Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Institutions Directory: from n/a t…

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00313 Published 2026-01-22 No fix listed CWE-862

TI-2025-41666 CVE-2025-68057 · GHSA-rr7p-hj3w-fgp4

WordPress Hospital Doctor Directory plugin <= 1.3.9 - Broken Access Control vulnerability

LOW 33

Missing Authorization vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hospital Doctor Directory: f…

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00361 Published 2026-01-22 No fix listed CWE-862

TI-2025-41576 CVE-2025-67967 · GHSA-57rf-cvcf-cgq7

WordPress Lawyer Directory plugin <= 1.3.3 - Broken Access Control vulnerability

LOW 33

Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lawyer Directory: from n/a through <= 1.3.3.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00361 Published 2026-01-22 No fix listed CWE-862

TI-2025-41575 CVE-2025-67966 · GHSA-rrp9-xxj5-q3r7

WordPress Lawyer Directory plugin <= 1.3.3 - Privilege Escalation vulnerability

MEDIUM 40

Incorrect Privilege Assignment vulnerability in e-plugins Lawyer Directory lawyer-directory allows Privilege Escalation.This issue affects Lawyer Directory: from n/a through <= 1.3.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00466 Published 2026-01-22 No fix listed CWE-266

TI-2025-12343 CVE-2025-13504 · GHSA-j8rm-2hg2-gmj5

WordPress Real Estate Pro plugin <= 2.1.4 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Real Estate Pro real-estate-pro allows Reflected XSS.This issue affects Real Estate Pro: from n/a through <=…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2026-01-08 No fix listed CWE-79

TI-2025-11514 CVE-2025-12551 · GHSA-g3g5-452q-crx8

WordPress ListingHub plugin 1.2.6 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins ListingHub listinghub allows Reflected XSS.This issue affects ListingHub: from n/a through 1.2.6.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00213 Published 2026-01-08 No fix listed CWE-79