e-plugins vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20256
3. 202626

Newest CVEs

• CVE-2026-66649

  WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability

  e-plugins · Directory Pro

  Critical9.3
• CVE-2026-28127

  WordPress Lawyer Directory plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

  e-plugins · Lawyer Directory

  High7.1
• CVE-2026-27396

  WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerability

  e-plugins · Directory Pro

  High7.3
• CVE-2025-69293

  WordPress Final User plugin <= 1.2.5 - Privilege Escalation vulnerability

  e-plugins · Final User

  High8.8
• CVE-2025-69292

  WordPress WP Membership plugin <= 1.6.4 - Privilege Escalation vulnerability

  e-plugins · WP Membership

  High8.8
• CVE-2025-69193

  WordPress WP Membership plugin <= 1.6.4 - Broken Access Control vulnerability

  e-plugins · WP Membership

  High7.3
• CVE-2025-69192

  WordPress Real Estate Pro plugin <= 2.1.5 - Broken Access Control vulnerability

  e-plugins · Real Estate Pro

  High7.3
• CVE-2025-69191

  WordPress ListingHub plugin <= 1.2.7 - Broken Access Control vulnerability

  e-plugins · ListingHub

  High7.3
• CVE-2025-69190

  WordPress Listihub theme <= 1.0.6 - Broken Access Control vulnerability

  e-plugins · Listihub

  High7.3
• CVE-2025-69188

  WordPress fitness-trainer plugin <= 1.7.1 - Broken Access Control vulnerability

  e-plugins · fitness-trainer

  High7.3