E-Plugins

32 CVEs across 23 E-Plugins products. Browse E-Plugins vulnerabilities, severities, and proof-of-concept exploits.

E-Plugins products with known CVEs

ProductCVEs
Directory Pro4
Hotel Listing4
Institutions Directory4
Lawyer Directory4
Wp Membership4
Hospital Doctor Directory3
Final User2
Listinghub2
Real Estate Pro2
Wp Membership2
Directory Pro1
Final User1
Fitness-Trainer1
Fitness Trainer1
Hospital \& Doctor Directory1
Hotel Directory1
Institutions Directory1
Jobbank1
Lawyer Directory1
Listihub1
Photographer-Directory1
Producer-Retailer1
Real Estate Pro1
E-Plugins CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-28127High7.12026-03-05Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Lawyer Directory lawyer-directory allows Reflec…
CVE-2026-27396High7.32026-03-05Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2025-69293High8.82026-01-22Incorrect Privilege Assignment vulnerability in e-plugins Final User final-user allows Privilege Escalation.This issue affects Final User: from n/a through <=…
CVE-2025-69292High8.82026-01-22Incorrect Privilege Assignment vulnerability in e-plugins WP Membership wp-membership allows Privilege Escalation.This issue affects WP Membership: from n/a th…
CVE-2025-69193High7.32026-01-22Missing Authorization vulnerability in e-plugins WP Membership wp-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2025-69192High7.32026-01-22Missing Authorization vulnerability in e-plugins Real Estate Pro real-estate-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This i…
CVE-2025-69191High7.32026-01-22Missing Authorization vulnerability in e-plugins ListingHub listinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…
CVE-2025-69190High7.32026-01-22Missing Authorization vulnerability in e-plugins Listihub listihub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects L…
CVE-2025-69188High7.32026-01-22Missing Authorization vulnerability in e-plugins fitness-trainer fitness-trainer allows Exploiting Incorrectly Configured Access Control Security Levels.This i…
CVE-2025-69187High7.32026-01-22Missing Authorization vulnerability in e-plugins Final User final-user allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…
CVE-2025-69186High7.32026-01-22Missing Authorization vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Exploiting Incorrectly Configured Access Control Se…
CVE-2025-69185High7.32026-01-22Missing Authorization vulnerability in e-plugins Hotel Listing hotel-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2025-69184High7.32026-01-22Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allows Exploiting Incorrectly Configured Access Control Security…
CVE-2025-69183High8.82026-01-22Incorrect Privilege Assignment vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Privilege Escalation.This issue affects Ho…
CVE-2025-69182High8.82026-01-22Incorrect Privilege Assignment vulnerability in e-plugins Institutions Directory institutions-directory allows Privilege Escalation.This issue affects Institut…
CVE-2025-69181High7.32026-01-22Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This…
CVE-2025-69056High7.12026-01-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Hotel Listing hotel-listing allows Reflected XS…
CVE-2025-68059High7.62026-01-22Missing Authorization vulnerability in e-plugins Hotel Listing hotel-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2025-68058High7.62026-01-22Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allows Exploiting Incorrectly Configured Access Control Security…
CVE-2025-68057High7.62026-01-22Missing Authorization vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Exploiting Incorrectly Configured Access Control Se…
CVE-2025-67967High7.62026-01-22Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This…
CVE-2025-67966High8.82026-01-22Incorrect Privilege Assignment vulnerability in e-plugins Lawyer Directory lawyer-directory allows Privilege Escalation.This issue affects Lawyer Directory: fr…
CVE-2025-13504High7.12026-01-08Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Real Estate Pro real-estate-pro allows Reflecte…
CVE-2025-12551High7.12026-01-08Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins ListingHub listinghub allows Reflected XSS.This…
CVE-2025-69085High7.12026-01-06Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins JobBank jobbank allows Reflected XSS.This issue…
CVE-2025-58710High8.82025-12-18Incorrect Privilege Assignment vulnerability in e-plugins Hotel Listing hotel-listing allows Privilege Escalation.This issue affects Hotel Listing: from n/a th…
CVE-2025-64243Medium4.32025-12-16Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2025-58638High7.12025-11-06Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Institutions Directory institutions-directory a…
CVE-2025-52748High7.12025-10-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Directory Pro directory-pro allows Reflected XS…
CVE-2025-57948Medium6.52025-09-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Directory Pro directory-pro allows DOM-Based XS…
CVE-2025-54717Medium5.42025-08-14Missing Authorization vulnerability in e-plugins WP Membership wp-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2024-10547Critical9.82024-11-09The WP Membership plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the user_profile_image_upload() function…
CVE-2020-36666High8.82023-03-27The directory-pro WordPress plugin before 1.9.5, final-user-wp-frontend-user-profiles WordPress plugin before 1.2.2, producer-retailer WordPress plugin through…
CVE-2015-4039Medium5.42020-01-06Multiple cross-site scripting (XSS) vulnerabilities in the WP Membership plugin 1.2.3 for WordPress allow remote authenticated users to inject arbitrary web sc…