e-plugins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Directory Pro | 5 | – | Aug 20, 2026 |
| WP Membership | 4 | – | Jan 22, 2026 |
| Hotel Listing | 4 | – | Jan 22, 2026 |
| Institutions Directory | 4 | – | Jan 22, 2026 |
| Lawyer Directory | 4 | – | Mar 5, 2026 |
| Hospital Doctor Directory | 3 | – | Jan 22, 2026 |
| Final User | 2 | – | Jan 22, 2026 |
| ListingHub | 2 | – | Jan 22, 2026 |
| Real Estate Pro | 2 | – | Jan 22, 2026 |
| Listihub | 1 | – | Jan 22, 2026 |
| JobBank | 1 | – | Jan 6, 2026 |
| fitness-trainer | 1 | – | Jan 22, 2026 |
Exploited and recent CVEs
- CVE-2026-66649 WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability 0.4%
- CVE-2026-28127 WordPress Lawyer Directory plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-27396 WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerability 0.3%
- CVE-2025-69293 WordPress Final User plugin <= 1.2.5 - Privilege Escalation vulnerability 0.3%
- CVE-2025-69292 WordPress WP Membership plugin <= 1.6.4 - Privilege Escalation vulnerability 0.3%
- CVE-2025-69193 WordPress WP Membership plugin <= 1.6.4 - Broken Access Control vulnerability 0.3%
- CVE-2025-69192 WordPress Real Estate Pro plugin <= 2.1.5 - Broken Access Control vulnerability 0.3%
- CVE-2025-69191 WordPress ListingHub plugin <= 1.2.7 - Broken Access Control vulnerability 0.3%
- CVE-2025-69190 WordPress Listihub theme <= 1.0.6 - Broken Access Control vulnerability 0.3%
- CVE-2025-69188 WordPress fitness-trainer plugin <= 1.7.1 - Broken Access Control vulnerability 0.3%
- CVE-2025-69187 WordPress Final User plugin <= 1.2.5 - Broken Access Control vulnerability 0.3%
- CVE-2025-69186 WordPress Hospital Doctor Directory plugin <= 1.3.9 - Broken Access Control vulnerability 0.3%
- CVE-2025-69185 WordPress Hotel Listing plugin <= 1.4.2 - Broken Access Control vulnerability 0.3%
- CVE-2025-69184 WordPress Institutions Directory plugin <= 1.3.4 - Broken Access Control vulnerability 0.3%
- CVE-2025-69183 WordPress Hospital Doctor Directory plugin <= 1.3.9 - Privilege Escalation vulnerability 0.4%
- CVE-2025-69182 WordPress Institutions Directory plugin <= 1.3.4 - Privilege Escalation vulnerability 0.4%
- CVE-2025-69181 WordPress Lawyer Directory plugin <= 1.3.4 - Broken Access Control vulnerability 0.3%
- CVE-2025-69056 WordPress Hotel Listing plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-68059 WordPress Hotel Listing plugin <= 1.4.2 - Broken Access Control vulnerability 0.4%
- CVE-2025-68058 WordPress Institutions Directory plugin <= 1.3..4 - Broken Access Control vulnerability 0.3%
- CVE-2025-68057 WordPress Hospital Doctor Directory plugin <= 1.3.9 - Broken Access Control vulnerability 0.4%
- CVE-2025-67967 WordPress Lawyer Directory plugin <= 1.3.3 - Broken Access Control vulnerability 0.4%
- CVE-2025-67966 WordPress Lawyer Directory plugin <= 1.3.3 - Privilege Escalation vulnerability 0.5%
- CVE-2025-13504 WordPress Real Estate Pro plugin <= 2.1.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-12551 WordPress ListingHub plugin 1.2.6 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-69085 WordPress JobBank plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-58710 WordPress Hotel Listing plugin <= 1.4.0 - Privilege Escalation vulnerability 0.4%
- CVE-2025-64243 WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerability 0.2%
- CVE-2025-58638 WordPress Institutions Directory Plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability 0.2%
- CVE-2025-52748 WordPress Directory Pro plugin <= 2.5.5 - Cross Site Scripting (XSS) Vulnerability 0.2%