E-plugins
23 CVEs tracked since 2026. Since Jan 2026, none of them reached CISA KEV.
E-plugins CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2026-01 | 23 | 0 |
Products
The products that kept showing up in E-plugins's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting E-plugins.
- CVE-2026-66649WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability9.3
- CVE-2026-28127WordPress Lawyer Directory plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability7.1
- CVE-2026-27396WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerability7.3
- CVE-2025-69293WordPress Final User plugin <= 1.2.5 - Privilege Escalation vulnerability8.8
- CVE-2025-69292WordPress WP Membership plugin <= 1.6.4 - Privilege Escalation vulnerability8.8
- CVE-2025-69191WordPress ListingHub plugin <= 1.2.7 - Broken Access Control vulnerability7.3
- CVE-2025-69192WordPress Real Estate Pro plugin <= 2.1.5 - Broken Access Control vulnerability7.3
- CVE-2025-69190WordPress Listihub theme <= 1.0.6 - Broken Access Control vulnerability7.3
- CVE-2025-69193WordPress WP Membership plugin <= 1.6.4 - Broken Access Control vulnerability7.3
- CVE-2025-69185WordPress Hotel Listing plugin <= 1.4.2 - Broken Access Control vulnerability7.3
- CVE-2025-69187WordPress Final User plugin <= 1.2.5 - Broken Access Control vulnerability7.3
- CVE-2025-69186WordPress Hospital Doctor Directory plugin <= 1.3.9 - Broken Access Control vulnerability7.3
- CVE-2025-69188WordPress fitness-trainer plugin <= 1.7.1 - Broken Access Control vulnerability7.3
- CVE-2025-69184WordPress Institutions Directory plugin <= 1.3.4 - Broken Access Control vulnerability7.3
- CVE-2025-69183WordPress Hospital Doctor Directory plugin <= 1.3.9 - Privilege Escalation vulnerability8.8
The record
- Peak rank
- #31 in Jan 2026
- Busiest month shown
- Jan 2026, 23 CVEs
- Months with a KEV entry
- 0 since Jan 2026
- Monthly snapshots
- 1 since 2026