CVEs we hold for E-plugins

Records whose assigning authority named E-plugins as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-66649WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerabilitye-plugins Directory Pro

CVE-2026-28127WordPress Lawyer Directory plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilitye-plugins Lawyer Directory

CVE-2026-27396WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerabilitye-plugins Directory Pro

CVE-2025-69293WordPress Final User plugin <= 1.2.5 - Privilege Escalation vulnerabilitye-plugins Final User

CVE-2025-69292WordPress WP Membership plugin <= 1.6.4 - Privilege Escalation vulnerabilitye-plugins WP Membership

CVE-2025-69193WordPress WP Membership plugin <= 1.6.4 - Broken Access Control vulnerabilitye-plugins WP Membership

CVE-2025-69192WordPress Real Estate Pro plugin <= 2.1.5 - Broken Access Control vulnerabilitye-plugins Real Estate Pro

CVE-2025-69191WordPress ListingHub plugin <= 1.2.7 - Broken Access Control vulnerabilitye-plugins ListingHub

CVE-2025-69190WordPress Listihub theme <= 1.0.6 - Broken Access Control vulnerabilitye-plugins Listihub

CVE-2025-69188WordPress fitness-trainer plugin <= 1.7.1 - Broken Access Control vulnerabilitye-plugins fitness-trainer

CVE-2025-69187WordPress Final User plugin <= 1.2.5 - Broken Access Control vulnerabilitye-plugins Final User

CVE-2025-69186WordPress Hospital Doctor Directory plugin <= 1.3.9 - Broken Access Control vulnerabilitye-plugins Hospital Doctor Directory

CVE-2025-69185WordPress Hotel Listing plugin <= 1.4.2 - Broken Access Control vulnerabilitye-plugins Hotel Listing

CVE-2025-69184WordPress Institutions Directory plugin <= 1.3.4 - Broken Access Control vulnerabilitye-plugins Institutions Directory

CVE-2025-69183WordPress Hospital Doctor Directory plugin <= 1.3.9 - Privilege Escalation vulnerabilitye-plugins Hospital Doctor Directory

CVE-2025-69182WordPress Institutions Directory plugin <= 1.3.4 - Privilege Escalation vulnerabilitye-plugins Institutions Directory

CVE-2025-69181WordPress Lawyer Directory plugin <= 1.3.4 - Broken Access Control vulnerabilitye-plugins Lawyer Directory

CVE-2025-69085WordPress JobBank plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerabilitye-plugins JobBank

CVE-2025-69056WordPress Hotel Listing plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerabilitye-plugins Hotel Listing

CVE-2025-68059WordPress Hotel Listing plugin <= 1.4.2 - Broken Access Control vulnerabilitye-plugins Hotel Listing

CVE-2025-68058WordPress Institutions Directory plugin <= 1.3..4 - Broken Access Control vulnerabilitye-plugins Institutions Directory

CVE-2025-68057WordPress Hospital Doctor Directory plugin <= 1.3.9 - Broken Access Control vulnerabilitye-plugins Hospital Doctor Directory

CVE-2025-67967WordPress Lawyer Directory plugin <= 1.3.3 - Broken Access Control vulnerabilitye-plugins Lawyer Directory

CVE-2025-67966WordPress Lawyer Directory plugin <= 1.3.3 - Privilege Escalation vulnerabilitye-plugins Lawyer Directory

CVE-2025-64243WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerabilitye-plugins Directory Pro

CVE-2025-58710WordPress Hotel Listing plugin <= 1.4.0 - Privilege Escalation vulnerabilitye-plugins Hotel Listing

CVE-2025-58638WordPress Institutions Directory Plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerabilitye-plugins Institutions Directory

CVE-2025-57948WordPress Directory Pro Plugin <= 2.5.5 - Cross Site Scripting (XSS) Vulnerabilitye-plugins Directory Pro

CVE-2025-54717WordPress WP Membership Plugin <= 1.6.3 - Settings Change Vulnerabilitye-plugins WP Membership

CVE-2025-52748WordPress Directory Pro plugin <= 2.5.5 - Cross Site Scripting (XSS) Vulnerabilitye-plugins Directory Pro

CVE-2025-13504WordPress Real Estate Pro plugin <= 2.1.4 - Reflected Cross Site Scripting (XSS) vulnerabilitye-plugins Real Estate Pro

CVE-2025-12551WordPress ListingHub plugin 1.2.6 - Cross Site Scripting (XSS) vulnerabilitye-plugins ListingHub

CVE-2024-10547WP Membership <= 1.6.2 - Unauthenticated Arbitrary File Uploade-plugins WP Membership

33 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.