e-plugins

Products

ProductCVEsExploitedLatest
Directory Pro5–Aug 20, 2026
WP Membership4–Jan 22, 2026
Hotel Listing4–Jan 22, 2026
Institutions Directory4–Jan 22, 2026
Lawyer Directory4–Mar 5, 2026
Hospital Doctor Directory3–Jan 22, 2026
Final User2–Jan 22, 2026
ListingHub2–Jan 22, 2026
Real Estate Pro2–Jan 22, 2026
Listihub1–Jan 22, 2026
JobBank1–Jan 6, 2026
fitness-trainer1–Jan 22, 2026

Exploited and recent CVEs

  • CVE-2026-66649 Critical 9.3 WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability 0.4%
  • CVE-2026-28127 High 7.1 WordPress Lawyer Directory plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-27396 High 7.3 WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerability 0.3%
  • CVE-2025-69293 High 8.8 WordPress Final User plugin <= 1.2.5 - Privilege Escalation vulnerability 0.3%
  • CVE-2025-69292 High 8.8 WordPress WP Membership plugin <= 1.6.4 - Privilege Escalation vulnerability 0.3%
  • CVE-2025-69193 High 7.3 WordPress WP Membership plugin <= 1.6.4 - Broken Access Control vulnerability 0.3%
  • CVE-2025-69192 High 7.3 WordPress Real Estate Pro plugin <= 2.1.5 - Broken Access Control vulnerability 0.3%
  • CVE-2025-69191 High 7.3 WordPress ListingHub plugin <= 1.2.7 - Broken Access Control vulnerability 0.3%
  • CVE-2025-69190 High 7.3 WordPress Listihub theme <= 1.0.6 - Broken Access Control vulnerability 0.3%
  • CVE-2025-69188 High 7.3 WordPress fitness-trainer plugin <= 1.7.1 - Broken Access Control vulnerability 0.3%
  • CVE-2025-69187 High 7.3 WordPress Final User plugin <= 1.2.5 - Broken Access Control vulnerability 0.3%
  • CVE-2025-69186 High 7.3 WordPress Hospital Doctor Directory plugin <= 1.3.9 - Broken Access Control vulnerability 0.3%
  • CVE-2025-69185 High 7.3 WordPress Hotel Listing plugin <= 1.4.2 - Broken Access Control vulnerability 0.3%
  • CVE-2025-69184 High 7.3 WordPress Institutions Directory plugin <= 1.3.4 - Broken Access Control vulnerability 0.3%
  • CVE-2025-69183 High 8.8 WordPress Hospital Doctor Directory plugin <= 1.3.9 - Privilege Escalation vulnerability 0.4%
  • CVE-2025-69182 High 8.8 WordPress Institutions Directory plugin <= 1.3.4 - Privilege Escalation vulnerability 0.4%
  • CVE-2025-69181 High 7.3 WordPress Lawyer Directory plugin <= 1.3.4 - Broken Access Control vulnerability 0.3%
  • CVE-2025-69056 High 7.1 WordPress Hotel Listing plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-68059 High 7.6 WordPress Hotel Listing plugin <= 1.4.2 - Broken Access Control vulnerability 0.4%
  • CVE-2025-68058 High 7.6 WordPress Institutions Directory plugin <= 1.3..4 - Broken Access Control vulnerability 0.3%
  • CVE-2025-68057 High 7.6 WordPress Hospital Doctor Directory plugin <= 1.3.9 - Broken Access Control vulnerability 0.4%
  • CVE-2025-67967 High 7.6 WordPress Lawyer Directory plugin <= 1.3.3 - Broken Access Control vulnerability 0.4%
  • CVE-2025-67966 High 8.8 WordPress Lawyer Directory plugin <= 1.3.3 - Privilege Escalation vulnerability 0.5%
  • CVE-2025-13504 High 7.1 WordPress Real Estate Pro plugin <= 2.1.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-12551 High 7.1 WordPress ListingHub plugin 1.2.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-69085 High 7.1 WordPress JobBank plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-58710 High 8.8 WordPress Hotel Listing plugin <= 1.4.0 - Privilege Escalation vulnerability 0.4%
  • CVE-2025-64243 Medium 4.3 WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerability 0.2%
  • CVE-2025-58638 High 7.1 WordPress Institutions Directory Plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-52748 High 7.1 WordPress Directory Pro plugin <= 2.5.5 - Cross Site Scripting (XSS) Vulnerability 0.2%