Emarket-design vulnerabilities

Products

• Request A Quote 8
• Campus Directory – Faculty, Staff & Student Directory Plugin For Wordpress 3
• Simple Contact Form Plugin For Wordpress – Wp Easy Contact 3
• Youtube Showcase 3
• Customer Support Ticket System & Helpdesk 2
• Employee Directory – Staff & Team Directory 2
• Employee Spotlight – Team Member Showcase & Meet The Team Plugin 2
• Event Rsvp And Simple Event Management Plugin 2
• Project Management, Bug And Issue Tracking Plugin – Software Issue Manager 2
• Video Gallery – Youtube Gallery, Playlist & Video Grid 2
• Video Gallery – Youtube Gallery & Responsive Video Playlist 2
• Wp Ticket Customer Service Software & Support Ticket System 2

Newest

• emarket-design youtube showcase WordPress YouTube Showcase plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-61995 7.1 HighOctober 29, 2026
• emarket-design request a quote Request a Quote <= 2.5.6 - Unauthenticated Quote Request Contact Record Disclosure via emd_get_std_pagenum CVE-2026-90988 5.3 MediumOctober 2, 2026
• emarket-design video gallery – youtube gallery, playlist & video grid Video Gallery <= 4.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment 'post_title' via emd_mb_meta Shortcode CVE-2026-15790 6.4 MediumAugust 16, 2026
• emarket-design customer support ticket system & helpdesk Customer Support Ticket System & Helpdesk <= 6.0.5 - Unauthenticated Code Injection via 'path' Parameter CVE-2026-15011 9.8 CriticalJuly 23, 2026
• emarket-design request a quote – quote forms for any wordpress site Request a Quote Form Plugin <= 2.5.5 - Unauthenticated Code Injection via 'path' Parameter CVE-2026-14249 7.5 HighJuly 2, 2026
• emarket-design video gallery – youtube gallery, playlist & video grid Video Gallery <= 4.0.3 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter CVE-2026-12923 7.5 HighJuly 1, 2026
• emarket-design customer support ticket system & helpdesk WP Ticket <= 6.0.4 - Unauthenticated SQL Injection via WordPress Search 's' Parameter CVE-2026-9848 Public exploit 7.5 HighJune 13, 2026
• emarket-design youtube showcase WordPress YouTube Showcase plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-15636 6.5 MediumApril 15, 2026
• emarket-design request a quote WordPress Request a Quote plugin <= 2.5.3 - Broken Access Control vulnerability CVE-2025-64248 4.3 MediumDecember 16, 2025
• emarket-design employee spotlight – team member showcase & meet the team plugin Employee Spotlight – Team Member Showcase & Meet the Team Plugin <= 5.1.3 - Missing Authorization to Authenticated (Subscriber+) Tracking Opt-In/Opt-Out Modification CVE-2025-13403 4.3 MediumDecember 13, 2025
• emarket-design employee spotlight – team member showcase & meet the team plugin Employee Spotlight – Team Member Showcase & Meet the Team Plugin <= 5.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-12090 6.4 MediumNovember 1, 2025
• emarket-design wp ticket customer service software & support ticket system WordPress WP Ticket Customer Service Software & Support Ticket System Plugin <= 6.0.2 - Cross Site Scripting (XSS) Vulnerability CVE-2025-60157 6.5 MediumSeptember 26, 2025
• emarket-design request a quote WordPress Request a Quote plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-58915 6.5 MediumSeptember 23, 2025
• emarket-design youtube showcase WordPress YouTube Showcase Plugin <= 3.5.1 - PHP Object Injection Vulnerability CVE-2025-54731 8.1 HighAugust 28, 2025
• emarket-design wp ticket customer service software & support ticket system WordPress WP Ticket Customer Service Software & Support Ticket System Plugin <= 6.0.2 - PHP Object Injection Vulnerability CVE-2025-53584 8.1 HighAugust 28, 2025
• emarket-design employee spotlight WordPress Employee Spotlight Plugin <= 5.1.1 - PHP Object Injection Vulnerability CVE-2025-53583 8.1 HighAugust 28, 2025
• emarket-design wp easy contact WordPress WP Easy Contact Plugin <= 4.0.1 - PHP Object Injection Vulnerability CVE-2025-53572 8.1 HighAugust 28, 2025
• emarket-design employee directory – staff listing & team directory plugin for wordpress WordPress Employee Directory – Staff Listing & Team Directory plugin for WordPress plugin <= 4.5.5 - PHP Object Injection vulnerability CVE-2025-53243 8.1 HighAugust 28, 2025
• emarket-design project management, bug and issue tracking plugin – software issue manager Software Issue Manager <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter CVE-2025-8314 6.4 MediumAugust 12, 2025
• cyberlord92 employee directory – staff directory and listing, emarket-design campus directory – faculty, staff & student directory plugin for wordpress, customer support ticket system & helpdesk plugin for wordpress +5 more +7 more Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution CVE-2025-8420 8.1 HighAugust 6, 2025
• emarket-design employee directory – staff & team directory Employee Directory <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter CVE-2025-8295 6.4 MediumAugust 5, 2025
• emarket-design campus directory – faculty, staff & student directory plugin for wordpress Campus Directory <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter CVE-2025-8313 6.4 MediumAugust 5, 2025
• emarket-design simple contact form plugin for wordpress – wp easy contact WP Easy Contact <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter CVE-2025-8315 6.4 MediumAugust 5, 2025
• emarket-design event rsvp and simple event management plugin, emarketdesign event rsvp and simple event management +1 more Event RSVP and Simple Event Management Plugin <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-5540 6.4 MediumJune 26, 2025
• emarket-design simple contact form plugin for wordpress – wp easy contact, emarketdesign wp easy contact +1 more Simplify Contact Management: WP Easy Contact <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-5539 6.4 MediumJune 4, 2025
• emarket-design campus directory – faculty, staff & student directory plugin for wordpress Faculty Staff and Student Directory Plugin – Campus Directory <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-5532 6.4 MediumJune 4, 2025
• emarket-design employee directory – staff & team directory Staff Directory – Employee Directory for WordPress <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-5531 6.4 MediumJune 4, 2025
• emarket-design request a quote Request a Quote < 2.4.1 - Admin+ Stored XSS CVE-2024-6231 5.9 MediumJuly 23, 2024
• emarketdesign youtube video gallery, emarket-design video gallery – youtube gallery & responsive video playlist +1 more YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress <= 3.3.6 - Missing Authorization to Arbitrary Post/Page Creation CVE-2024-3268 5.3 MediumMay 21, 2024
• emarket-design request a quote Request a Quote <= 2.3.7 - CSV Injection CVE-2022-2240 8.8 HighJuly 25, 2022
• emarket-design request a quote Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting CVE-2022-2239 4.8 MediumJuly 25, 2022
• emarket-design request a quote Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting CVE-2021-24489 4.8 MediumOctober 25, 2021
• emarket-design request a quote Request a Quote < 2.3.4 - Authenticated Stored XSS CVE-2021-24420 5.4 MediumJuly 12, 2021