e-plugins vulnerabilities and threats

33 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.6	EPSS 0.4%	CVE-2025-68057Hospital Doctor Directory (WordPress plugin) · Missing Authorization High7.6EPSS 0.4%2026-01-22CVE Database V5CVE-2025-68057 Missing Authorization vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hospital Doctor Directory: from n/a through <= 1.3.9. EPSS 0.4%Vulnerability e-plugins	CVE Database V5	2026-01-22
High	7.6	EPSS 0.4%	CVE-2025-67967Lawyer Directory (WordPress plugin) · Missing Authorization High7.6EPSS 0.4%2026-01-22CVE Database V5CVE-2025-67967 Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lawyer Directory: from n/a through <= 1.3.3. EPSS 0.4%Vulnerability e-plugins	CVE Database V5	2026-01-22
High	8.8	EPSS 0.5%	CVE-2025-67966Lawyer Directory (WordPress plugin) · Incorrect Privilege Assignment High8.8EPSS 0.5%2026-01-22CVE Database V5CVE-2025-67966 Incorrect Privilege Assignment vulnerability in e-plugins Lawyer Directory lawyer-directory allows Privilege Escalation.This issue affects Lawyer Directory: from n/a through <= 1.3.3. EPSS 0.5%Vulnerability e-plugins	CVE Database V5	2026-01-22
High	7.1	EPSS 0.3%	CVE-2025-13504Real Estate Pro (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2026-01-08CVE Database V5CVE-2025-13504 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Real Estate Pro real-estate-pro allows Reflected XSS.This issue affects Real Estate Pro: from n/a through <= 2.1.4. EPSS 0.3%Vulnerability e-plugins	CVE Database V5	2026-01-08
High	7.1	EPSS 0.2%	CVE-2025-12551ListingHub (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-01-08CVE Database V5CVE-2025-12551 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins ListingHub listinghub allows Reflected XSS.This issue affects ListingHub: from n/a through 1.2.6. EPSS 0.2%Vulnerability e-plugins	CVE Database V5	2026-01-08
High	7.1	EPSS 0.2%	CVE-2025-69085JobBank (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-01-06CVE Database V5CVE-2025-69085 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins JobBank jobbank allows Reflected XSS.This issue affects JobBank: from n/a through <= 1.2.2. EPSS 0.2%Vulnerability e-plugins	CVE Database V5	2026-01-06
High	8.8	EPSS 0.4%	CVE-2025-58710Hotel Listing (WordPress plugin) · Incorrect Privilege Assignment High8.8EPSS 0.4%2025-12-18CVE Database V5CVE-2025-58710 Incorrect Privilege Assignment vulnerability in e-plugins Hotel Listing hotel-listing allows Privilege Escalation.This issue affects Hotel Listing: from n/a through <= 1.4.0. EPSS 0.4%Vulnerability e-plugins	CVE Database V5	2025-12-18
Medium	4.3	EPSS 0.2%	CVE-2025-64243Directory Pro (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2025-12-16CVE Database V5CVE-2025-64243 Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directory Pro: from n/a through <= 2.5.6. EPSS 0.2%Vulnerability e-plugins CWE-862	CVE Database V5	2025-12-16
High	7.1	EPSS 0.2%	CVE-2025-58638Institutions Directory (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2025-11-06CVE Database V5CVE-2025-58638 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Institutions Directory institutions-directory allows Reflected XSS.This issue affects Institutions Directory: from n/a through <= 1.3.3. EPSS 0.2%Vulnerability e-plugins	CVE Database V5	2025-11-06
High	7.1	EPSS 0.3%	CVE-2025-52748Directory Pro (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-10-22CVE Database V5CVE-2025-52748 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Directory Pro directory-pro allows Reflected XSS.This issue affects Directory Pro: from n/a through <= 2.5.5. EPSS 0.3%Vulnerability e-plugins	CVE Database V5	2025-10-22
Medium	6.5	EPSS 0.3%	CVE-2025-57948Directory Pro (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2025-09-22CVE Database V5CVE-2025-57948 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Directory Pro directory-pro allows DOM-Based XSS.This issue affects Directory Pro: from n/a through <= 2.5.5. EPSS 0.3%Vulnerability e-plugins	CVE Database V5	2025-09-22
Medium	5.4	EPSS 0.2%	CVE-2025-54717WP Membership · Missing Authorization Medium5.4EPSS 0.2%2025-08-14CVE Database V5CVE-2025-54717 Missing Authorization vulnerability in e-plugins WP Membership wp-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Membership: from n/a through <= 1.6.3. EPSS 0.2%Vulnerability e-plugins	CVE Database V5	2025-08-14
Critical	9.8	EPSS 0.9%	CVE-2024-10547WP Membership · Unrestricted File Upload Critical9.8EPSS 0.9%2024-11-09CVE Database V5CVE-2024-10547 The WP Membership plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the user_profile_image_upload() function in all versions up to, and including, 1.6.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. EPSS 0.9%Vulnerability e-plugins CWE-434	CVE Database V5	2024-11-09

Page 2 of 2