E-plugins vulnerabilities

Products

• Directory Pro 5
• Hotel Listing 5
• Institutions Directory 4
• Lawyer Directory 4
• Wp Membership 4
• Hospital Doctor Directory 3
• Wp Membership 3
• Final User 2
• Fitness-trainer 2
• Jobbank 2
• Listinghub 2
• Real Estate Pro 2

Newest

• e-plugins directory pro WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability CVE-2026-66649 9.3 CriticalAugust 20, 2026
• e-plugins jobbank WordPress JobBank plugin <= 1.2.3 - Broken Access Control vulnerability CVE-2025-69189 7.3 HighJune 17, 2026
• e-plugins lawyer directory WordPress Lawyer Directory plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-28127 7.1 HighMarch 5, 2026
• e-plugins directory pro WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerability CVE-2026-27396 7.3 HighMarch 5, 2026
• e-plugins final user WordPress Final User plugin <= 1.2.5 - Privilege Escalation vulnerability CVE-2025-69293 8.8 HighJanuary 22, 2026
• e-plugins wp membership WordPress WP Membership plugin <= 1.6.4 - Privilege Escalation vulnerability CVE-2025-69292 8.8 HighJanuary 22, 2026
• e-plugins wp membership WordPress WP Membership plugin <= 1.6.4 - Broken Access Control vulnerability CVE-2025-69193 7.3 HighJanuary 22, 2026
• bhubbard real estate pro WordPress Real Estate Pro plugin <= 2.1.5 - Broken Access Control vulnerability CVE-2025-69192 7.3 HighJanuary 22, 2026
• e-plugins listinghub WordPress ListingHub plugin <= 1.2.7 - Broken Access Control vulnerability CVE-2025-69191 7.3 HighJanuary 22, 2026
• e-plugins listihub WordPress Listihub theme <= 1.0.6 - Broken Access Control vulnerability CVE-2025-69190 7.3 HighJanuary 22, 2026
• e-plugins fitness-trainer WordPress fitness-trainer plugin <= 1.7.1 - Broken Access Control vulnerability CVE-2025-69188 7.3 HighJanuary 22, 2026
• e-plugins final user WordPress Final User plugin <= 1.2.5 - Broken Access Control vulnerability CVE-2025-69187 7.3 HighJanuary 22, 2026
• e-plugins hospital doctor directory WordPress Hospital Doctor Directory plugin <= 1.3.9 - Broken Access Control vulnerability CVE-2025-69186 7.3 HighJanuary 22, 2026
• e-plugins hotel listing WordPress Hotel Listing plugin <= 1.4.2 - Broken Access Control vulnerability CVE-2025-69185 7.3 HighJanuary 22, 2026
• e-plugins institutions directory WordPress Institutions Directory plugin <= 1.3.4 - Broken Access Control vulnerability CVE-2025-69184 7.3 HighJanuary 22, 2026
• e-plugins hospital doctor directory WordPress Hospital Doctor Directory plugin <= 1.3.9 - Privilege Escalation vulnerability CVE-2025-69183 8.8 HighJanuary 22, 2026
• e-plugins institutions directory WordPress Institutions Directory plugin <= 1.3.4 - Privilege Escalation vulnerability CVE-2025-69182 8.8 HighJanuary 22, 2026
• e-plugins lawyer directory WordPress Lawyer Directory plugin <= 1.3.4 - Broken Access Control vulnerability CVE-2025-69181 7.3 HighJanuary 22, 2026
• e-plugins hotel listing WordPress Hotel Listing plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-69056 7.1 HighJanuary 22, 2026
• e-plugins hotel listing WordPress Hotel Listing plugin <= 1.4.2 - Broken Access Control vulnerability CVE-2025-68059 7.6 HighJanuary 22, 2026
• e-plugins institutions directory WordPress Institutions Directory plugin <= 1.3..4 - Broken Access Control vulnerability CVE-2025-68058 7.6 HighJanuary 22, 2026
• e-plugins hospital doctor directory WordPress Hospital Doctor Directory plugin <= 1.3.9 - Broken Access Control vulnerability CVE-2025-68057 7.6 HighJanuary 22, 2026
• e-plugins lawyer directory WordPress Lawyer Directory plugin <= 1.3.3 - Broken Access Control vulnerability CVE-2025-67967 7.6 HighJanuary 22, 2026
• e-plugins lawyer directory WordPress Lawyer Directory plugin <= 1.3.3 - Privilege Escalation vulnerability CVE-2025-67966 8.8 HighJanuary 22, 2026
• bhubbard real estate pro WordPress Real Estate Pro plugin <= 2.1.4 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-13504 7.1 HighJanuary 8, 2026
• e-plugins listinghub WordPress ListingHub plugin 1.2.6 - Cross Site Scripting (XSS) vulnerability CVE-2025-12551 7.1 HighJanuary 8, 2026
• e-plugins jobbank WordPress JobBank plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-69085 7.1 HighJanuary 6, 2026
• e-plugins hotel listing WordPress Hotel Listing plugin <= 1.4.0 - Privilege Escalation vulnerability CVE-2025-58710 8.8 HighDecember 18, 2025
• e-plugins directory pro WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerability CVE-2025-64243 4.3 MediumDecember 16, 2025
• e-plugins institutions directory WordPress Institutions Directory Plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58638 7.1 HighNovember 6, 2025
• e-plugins directory pro WordPress Directory Pro plugin <= 2.5.5 - Cross Site Scripting (XSS) Vulnerability CVE-2025-52748 7.1 HighOctober 22, 2025
• e-plugins directory pro WordPress Directory Pro Plugin <= 2.5.5 - Cross Site Scripting (XSS) Vulnerability CVE-2025-57948 6.5 MediumSeptember 22, 2025
• e-plugins wp membership WordPress WP Membership Plugin <= 1.6.3 - Settings Change Vulnerability CVE-2025-54717 5.4 MediumAugust 14, 2025
• e-plugins wp membership WP Membership <= 1.6.2 - Unauthenticated Arbitrary File Upload CVE-2024-10547 9.8 CriticalNovember 9, 2024
• e-plugins fitness-trainer, hotel listing, photographer-directory +17 more +19 more Multiple e-plugins - Subscriber+ Privilege Escalation CVE-2020-36666 8.8 HighMarch 27, 2023
• e-plugins wp membership Multiple cross-site scripting (XSS) vulnerabilities in the WP Membership plugin 1.2.3 for... CVE-2015-4039 Public exploit 5.4 MediumJanuary 6, 2020