Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

emarket-design vulnerabilities

27 published CVEs name emarket-design among the affected products.

Published CVEs
27
Last 12 months
9
Critical
1
Known exploited
0

Critical 1High 10Medium 16Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20241
  2. 202519
  3. 20267

Newest CVEs

  • CVE-2026-61995

    WordPress YouTube Showcase plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability

    emarket-design · YouTube Showcase

    High7.1
  • CVE-2026-15790

    Video Gallery <= 4.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment 'post_title' via emd_mb_meta Shortcode

    emarket-design · Video Gallery – YouTube Gallery, Playlist & Video Grid

    Medium6.4
  • CVE-2026-15011

    Customer Support Ticket System & Helpdesk <= 6.0.5 - Unauthenticated Code Injection via 'path' Parameter

    emarket-design · Customer Support Ticket System & Helpdesk

    Critical9.8
  • CVE-2026-14249

    Request a Quote Form Plugin <= 2.5.5 - Unauthenticated Code Injection via 'path' Parameter

    emarket-design · Request a Quote – Quote Forms for Any WordPress Site

    High7.5
  • CVE-2026-12923

    Video Gallery <= 4.0.3 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter

    emarket-design · Video Gallery – YouTube Gallery, Playlist & Video Grid

    High7.5
  • CVE-2026-9848

    WP Ticket <= 6.0.4 - Unauthenticated SQL Injection via WordPress Search 's' Parameter

    emarket-design · Customer Support Ticket System & Helpdesk

    High7.5
  • CVE-2025-15636

    WordPress YouTube Showcase plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability

    emarket-design · YouTube Showcase

    Medium6.5
  • CVE-2025-64248

    WordPress Request a Quote plugin <= 2.5.3 - Broken Access Control vulnerability

    emarket-design · Request a Quote

    Medium4.3
  • CVE-2025-13403

    Employee Spotlight – Team Member Showcase & Meet the Team Plugin <= 5.1.3 - Missing Authorization to Authenticated (Subscriber+) Tracking Opt-In/Opt-Out Modification

    emarket-design · Employee Spotlight – Team Member Showcase & Meet the Team Plugin

    Medium4.3
  • CVE-2025-12090

    Employee Spotlight – Team Member Showcase & Meet the Team Plugin <= 5.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

    emarket-design · Employee Spotlight – Team Member Showcase & Meet the Team Plugin

    Medium6.4