e-plugins vulnerabilities and threats

33 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.3	EPSS 0.4%	CVE-2026-66649Directory Pro (WordPress plugin) · SQL Injection Critical9.3EPSS 0.4%2026-08-20CVE Database V5CVE-2026-66649 CVE-2026-66649 is a critical unauthenticated SQL Injection vulnerability affecting e-plugins Directory Pro versions up to and including 2.5.8. This flaw allows remote attackers to inject malicious SQL commands without authentication, potentially leading to high confidentiality impact and limited availability impact. No official patch or remediation details are provided in the available data. EPSS 0.4%Vulnerability e-plugins CWE-89 #ghsa-rg68-729g-x9vg	CVE Database V5	2026-08-20
High	7.1	EPSS 0.2%	CVE-2026-28127Lawyer Directory (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-03-05CVE Database V5CVE-2026-28127 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Lawyer Directory lawyer-directory allows Reflected XSS.This issue affects Lawyer Directory: from n/a through <= 1.3.2. EPSS 0.2%Vulnerability e-plugins	CVE Database V5	2026-03-05
High	7.3	EPSS 0.2%	CVE-2026-27396Directory Pro (WordPress plugin) · Missing Authorization High7.3EPSS 0.2%2026-03-05CVE Database V5CVE-2026-27396 Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directory Pro: from n/a through <= 2.5.6. EPSS 0.2%Vulnerability e-plugins	CVE Database V5	2026-03-05
High	8.8	EPSS 0.3%	CVE-2025-69293Final User (WordPress plugin) · Incorrect Privilege Assignment High8.8EPSS 0.3%2026-01-22CVE Database V5CVE-2025-69293 Incorrect Privilege Assignment vulnerability in e-plugins Final User final-user allows Privilege Escalation.This issue affects Final User: from n/a through <= 1.2.5. EPSS 0.3%Vulnerability e-plugins	CVE Database V5	2026-01-22
High	8.8	EPSS 0.3%	CVE-2025-69292WP Membership · Incorrect Privilege Assignment High8.8EPSS 0.3%2026-01-22CVE Database V5CVE-2025-69292 Incorrect Privilege Assignment vulnerability in e-plugins WP Membership wp-membership allows Privilege Escalation.This issue affects WP Membership: from n/a through <= 1.6.4. EPSS 0.3%Vulnerability e-plugins	CVE Database V5	2026-01-22
High	7.3	EPSS 0.3%	CVE-2025-69193WP Membership · Missing Authorization High7.3EPSS 0.3%2026-01-22CVE Database V5CVE-2025-69193 Missing Authorization vulnerability in e-plugins WP Membership wp-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Membership: from n/a through <= 1.6.4. EPSS 0.3%Vulnerability e-plugins	CVE Database V5	2026-01-22
High	7.3	EPSS 0.3%	CVE-2025-69192Real Estate Pro (WordPress plugin) · Missing Authorization High7.3EPSS 0.3%2026-01-22CVE Database V5CVE-2025-69192 Missing Authorization vulnerability in e-plugins Real Estate Pro real-estate-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real Estate Pro: from n/a through <= 2.1.5. EPSS 0.3%Vulnerability e-plugins	CVE Database V5	2026-01-22
High	7.3	EPSS 0.3%	CVE-2025-69191ListingHub (WordPress plugin) · Missing Authorization High7.3EPSS 0.3%2026-01-22CVE Database V5CVE-2025-69191 Missing Authorization vulnerability in e-plugins ListingHub listinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingHub: from n/a through <= 1.2.7. EPSS 0.3%Vulnerability e-plugins	CVE Database V5	2026-01-22
High	7.3	EPSS 0.3%	CVE-2025-69190Listihub (WordPress plugin) · Missing Authorization High7.3EPSS 0.3%2026-01-22CVE Database V5CVE-2025-69190 Missing Authorization vulnerability in e-plugins Listihub listihub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Listihub: from n/a through <= 1.0.6. EPSS 0.3%Vulnerability e-plugins	CVE Database V5	2026-01-22
High	7.3	EPSS 0.3%	CVE-2025-69188fitness-trainer (WordPress plugin) · Missing Authorization High7.3EPSS 0.3%2026-01-22CVE Database V5CVE-2025-69188 Missing Authorization vulnerability in e-plugins fitness-trainer fitness-trainer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects fitness-trainer: from n/a through <= 1.7.1. EPSS 0.3%Vulnerability e-plugins	CVE Database V5	2026-01-22
High	7.3	EPSS 0.3%	CVE-2025-69187Final User (WordPress plugin) · Missing Authorization High7.3EPSS 0.3%2026-01-22CVE Database V5CVE-2025-69187 Missing Authorization vulnerability in e-plugins Final User final-user allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Final User: from n/a through <= 1.2.5. EPSS 0.3%Vulnerability e-plugins	CVE Database V5	2026-01-22
High	7.3	EPSS 0.3%	CVE-2025-69186Hospital Doctor Directory (WordPress plugin) · Missing Authorization High7.3EPSS 0.3%2026-01-22CVE Database V5CVE-2025-69186 Missing Authorization vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hospital Doctor Directory: from n/a through <= 1.3.9. EPSS 0.3%Vulnerability e-plugins	CVE Database V5	2026-01-22
High	7.3	EPSS 0.3%	CVE-2025-69185Hotel Listing (WordPress plugin) · Missing Authorization High7.3EPSS 0.3%2026-01-22CVE Database V5CVE-2025-69185 Missing Authorization vulnerability in e-plugins Hotel Listing hotel-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hotel Listing: from n/a through <= 1.4.2. EPSS 0.3%Vulnerability e-plugins	CVE Database V5	2026-01-22
High	7.3	EPSS 0.3%	CVE-2025-69184Institutions Directory (WordPress plugin) · Missing Authorization High7.3EPSS 0.3%2026-01-22CVE Database V5CVE-2025-69184 Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Institutions Directory: from n/a through <= 1.3.4. EPSS 0.3%Vulnerability e-plugins	CVE Database V5	2026-01-22
High	8.8	EPSS 0.4%	CVE-2025-69183Hospital Doctor Directory (WordPress plugin) · Incorrect Privilege Assignment High8.8EPSS 0.4%2026-01-22CVE Database V5CVE-2025-69183 Incorrect Privilege Assignment vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Privilege Escalation.This issue affects Hospital Doctor Directory: from n/a through <= 1.3.9. EPSS 0.4%Vulnerability e-plugins	CVE Database V5	2026-01-22
High	8.8	EPSS 0.4%	CVE-2025-69182Institutions Directory (WordPress plugin) · Incorrect Privilege Assignment High8.8EPSS 0.4%2026-01-22CVE Database V5CVE-2025-69182 Incorrect Privilege Assignment vulnerability in e-plugins Institutions Directory institutions-directory allows Privilege Escalation.This issue affects Institutions Directory: from n/a through <= 1.3.4. EPSS 0.4%Vulnerability e-plugins	CVE Database V5	2026-01-22
High	7.3	EPSS 0.3%	CVE-2025-69181Lawyer Directory (WordPress plugin) · Missing Authorization High7.3EPSS 0.3%2026-01-22CVE Database V5CVE-2025-69181 Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lawyer Directory: from n/a through <= 1.3.4. EPSS 0.3%Vulnerability e-plugins	CVE Database V5	2026-01-22
High	7.1	EPSS 0.2%	CVE-2025-69056Hotel Listing (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-01-22CVE Database V5CVE-2025-69056 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Hotel Listing hotel-listing allows Reflected XSS.This issue affects Hotel Listing: from n/a through <= 1.4.0. EPSS 0.2%Vulnerability e-plugins	CVE Database V5	2026-01-22
High	7.6	EPSS 0.4%	CVE-2025-68059Hotel Listing (WordPress plugin) · Missing Authorization High7.6EPSS 0.4%2026-01-22CVE Database V5CVE-2025-68059 Missing Authorization vulnerability in e-plugins Hotel Listing hotel-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hotel Listing: from n/a through <= 1.4.2. EPSS 0.4%Vulnerability e-plugins	CVE Database V5	2026-01-22
High	7.6	EPSS 0.3%	CVE-2025-68058Institutions Directory (WordPress plugin) · Missing Authorization High7.6EPSS 0.3%2026-01-22CVE Database V5CVE-2025-68058 Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Institutions Directory: from n/a through <= 1.3..4. EPSS 0.3%Vulnerability e-plugins	CVE Database V5	2026-01-22

Page 1 of 2