E-plugins - vulnerabilities (CVEs)

35 CVEs in 17 products, 0 in the last 30 days, newest from 2026-08-20.

Products

• Directory Pro - 5 CVEs
• Hotel Listing - 4 CVEs
• Institutions Directory - 4 CVEs
• Lawyer Directory - 4 CVEs
• Wp Membership - 4 CVEs
• Hospital Doctor Directory - 3 CVEs
• Final User - 2 CVEs
• Listinghub - 2 CVEs
• Real Estate Pro - 2 CVEs
• Fitness-trainer - 1 CVEs
• Fitness Trainer - 1 CVEs
• Hospital & Doctor Directory - 1 CVEs
• Hotel Directory - 1 CVEs
• Jobbank - 1 CVEs
• Listihub - 1 CVEs
• Photographer-directory - 1 CVEs
• Producer-retailer - 1 CVEs

Newest CVEs of E-plugins

• CVE-2026-66649 - CVSS 9.3 (critical), 2026-08-20: Unauthenticated SQL Injection in Directory Pro <= 2.5.8 versions.
• CVE-2026-28127 - CVSS 7.1 (high), 2026-03-05: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Lawyer Directory lawyer-directory allows…
• CVE-2026-27396 - CVSS 7.3 (high), 2026-03-05: Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This…
• CVE-2025-69191 - CVSS 7.3 (high), 2026-01-22: Missing Authorization vulnerability in e-plugins ListingHub listinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
• CVE-2025-69292 - CVSS 8.8 (high), 2026-01-22: Incorrect Privilege Assignment vulnerability in e-plugins WP Membership wp-membership allows Privilege Escalation.This issue affects WP Membership: from n/a…
• CVE-2025-69293 - CVSS 8.8 (high), 2026-01-22: Incorrect Privilege Assignment vulnerability in e-plugins Final User final-user allows Privilege Escalation.This issue affects Final User: from n/a through <=…
• CVE-2025-69192 - CVSS 7.3 (high), 2026-01-22: Missing Authorization vulnerability in e-plugins Real Estate Pro real-estate-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This…
• CVE-2025-69193 - CVSS 7.3 (high), 2026-01-22: Missing Authorization vulnerability in e-plugins WP Membership wp-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This…
• CVE-2025-69187 - CVSS 7.3 (high), 2026-01-22: Missing Authorization vulnerability in e-plugins Final User final-user allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
• CVE-2025-69190 - CVSS 7.3 (high), 2026-01-22: Missing Authorization vulnerability in e-plugins Listihub listihub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
• CVE-2025-69185 - CVSS 7.3 (high), 2026-01-22: Missing Authorization vulnerability in e-plugins Hotel Listing hotel-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This…
• CVE-2025-69188 - CVSS 7.3 (high), 2026-01-22: Missing Authorization vulnerability in e-plugins fitness-trainer fitness-trainer allows Exploiting Incorrectly Configured Access Control Security Levels.This…
• CVE-2025-69186 - CVSS 7.3 (high), 2026-01-22: Missing Authorization vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Exploiting Incorrectly Configured Access Control…
• CVE-2025-69184 - CVSS 7.3 (high), 2026-01-22: Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allows Exploiting Incorrectly Configured Access Control…
• CVE-2025-69182 - CVSS 8.8 (high), 2026-01-22: Incorrect Privilege Assignment vulnerability in e-plugins Institutions Directory institutions-directory allows Privilege Escalation.This issue affects…
• CVE-2025-69183 - CVSS 8.8 (high), 2026-01-22: Incorrect Privilege Assignment vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Privilege Escalation.This issue affects…
• CVE-2025-69181 - CVSS 7.3 (high), 2026-01-22: Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configured Access Control Security…
• CVE-2025-69056 - CVSS 7.1 (high), 2026-01-22: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Hotel Listing hotel-listing allows Reflected…
• CVE-2025-68057 - CVSS 7.6 (high), 2026-01-22: Missing Authorization vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Exploiting Incorrectly Configured Access Control…
• CVE-2025-68058 - CVSS 7.6 (high), 2026-01-22: Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allows Exploiting Incorrectly Configured Access Control…
• CVE-2025-68059 - CVSS 7.6 (high), 2026-01-22: Missing Authorization vulnerability in e-plugins Hotel Listing hotel-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This…
• CVE-2025-67967 - CVSS 7.6 (high), 2026-01-22: Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configured Access Control Security…
• CVE-2025-67966 - CVSS 8.8 (high), 2026-01-22: Incorrect Privilege Assignment vulnerability in e-plugins Lawyer Directory lawyer-directory allows Privilege Escalation.This issue affects Lawyer Directory:…
• CVE-2025-13504 - CVSS 7.1 (high), 2026-01-08: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Real Estate Pro real-estate-pro allows…
• CVE-2025-12551 - CVSS 7.1 (high), 2026-01-08: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins ListingHub listinghub allows Reflected…
• CVE-2025-69085 - CVSS 7.1 (high), 2026-01-06: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins JobBank jobbank allows Reflected XSS.This…
• CVE-2025-58710 - CVSS 8.8 (high), 2025-12-18: Incorrect Privilege Assignment vulnerability in e-plugins Hotel Listing hotel-listing allows Privilege Escalation.This issue affects Hotel Listing: from n/a…
• CVE-2025-64243 - CVSS 4.3 (medium), 2025-12-16: Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This…
• CVE-2025-58638 - CVSS 7.1 (high), 2025-11-06: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Institutions Directory institutions-directory…
• CVE-2025-52748 - CVSS 7.1 (high), 2025-10-22: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Directory Pro directory-pro allows Reflected…