Log in Start free

eMarket Design

Products

ProductCVEsExploitedLatest
YouTube Showcase3–Oct 29, 2026
Simple Contact Form Plugin for WordPress – WP Easy Contact3–Aug 6, 2025
Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress3–Aug 6, 2025
Employee Spotlight – Team Member Showcase & Meet the Team Plugin2–Dec 13, 2025
Event RSVP and Simple Event Management Plugin2–Aug 6, 2025
Project Management, Bug and Issue Tracking Plugin – Software Issue Manager2–Aug 12, 2025
Request a Quote2–Dec 16, 2025
Customer Support Ticket System & Helpdesk2–Jul 23, 2026
Employee Directory – Staff & Team Directory2–Aug 5, 2025
Video Gallery – YouTube Gallery & Responsive Video Playlist2–Aug 6, 2025
Video Gallery – YouTube Gallery, Playlist & Video Grid2–Aug 16, 2026
WP Ticket Customer Service Software & Support Ticket System2–Sep 26, 2025
Employee Directory – Staff Listing & Team Directory Plugin for WordPress1–Aug 28, 2025
YouTube Video Gallery by YouTube Showcase1–Oct 3, 2023
Customer Support Ticket System & Helpdesk Plugin for WordPress1–Aug 6, 2025
WP Easy Contact1–Aug 28, 2025
Employee Spotlight1–Aug 28, 2025
Request a Quote – Quote Forms for Any WordPress Site1–Jul 2, 2026
Request a Quote Form Plugin – Price Quote Request Management Made Easy1–Aug 6, 2025

Exploited and recent CVEs

  • CVE-2026-61995 High 7.1 WordPress YouTube Showcase plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-15790 Medium 6.4 Video Gallery <= 4.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment 'post_title' via emd_mb_meta Shortcode 0.3%
  • CVE-2026-15011 Critical 9.8 Customer Support Ticket System & Helpdesk <= 6.0.5 - Unauthenticated Code Injection via 'path' Parameter 1.0%
  • CVE-2026-14249 High 7.5 Request a Quote Form Plugin <= 2.5.5 - Unauthenticated Code Injection via 'path' Parameter 0.6%
  • CVE-2026-12923 High 7.5 Video Gallery <= 4.0.3 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter 0.5%
  • CVE-2026-9848 High 7.5 WP Ticket <= 6.0.4 - Unauthenticated SQL Injection via WordPress Search 's' Parameter 2.1%
  • CVE-2025-15636 Medium 6.5 WordPress YouTube Showcase plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-64248 Medium 4.3 WordPress Request a Quote plugin <= 2.5.3 - Broken Access Control vulnerability 0.2%
  • CVE-2025-13403 Medium 4.3 Employee Spotlight – Team Member Showcase & Meet the Team Plugin <= 5.1.3 - Missing Authorization to Authenticated (Subscriber+) Tracking Opt-In/Opt-Out Modification 0.2%
  • CVE-2025-12090 Medium 6.4 Employee Spotlight – Team Member Showcase & Meet the Team Plugin <= 5.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2025-60157 Medium 6.5 WordPress WP Ticket Customer Service Software & Support Ticket System Plugin <= 6.0.2 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-58915 Medium 6.5 WordPress Request a Quote plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-54731 High 8.1 WordPress YouTube Showcase Plugin <= 3.5.1 - PHP Object Injection Vulnerability 0.3%
  • CVE-2025-53584 High 8.1 WordPress WP Ticket Customer Service Software & Support Ticket System Plugin <= 6.0.2 - PHP Object Injection Vulnerability 0.3%
  • CVE-2025-53583 High 8.1 WordPress Employee Spotlight Plugin <= 5.1.1 - PHP Object Injection Vulnerability 0.3%
  • CVE-2025-53572 High 8.1 WordPress WP Easy Contact Plugin <= 4.0.1 - PHP Object Injection Vulnerability 0.3%
  • CVE-2025-53243 High 8.1 WordPress Employee Directory – Staff Listing & Team Directory plugin for WordPress plugin <= 4.5.5 - PHP Object Injection vulnerability 0.3%
  • CVE-2025-8314 Medium 6.4 Software Issue Manager <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter 0.3%
  • CVE-2025-8420 High 8.1 Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution 1.1%
  • CVE-2025-8420 High 8.1 Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution 1.1%
  • CVE-2025-8420 High 8.1 Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution 1.1%
  • CVE-2025-8420 High 8.1 Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution 1.1%
  • CVE-2025-8420 High 8.1 Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution 1.1%
  • CVE-2025-8420 High 8.1 Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution 1.1%
  • CVE-2025-8420 High 8.1 Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution 1.1%
  • CVE-2025-8295 Medium 6.4 Employee Directory <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter 0.3%
  • CVE-2025-8313 Medium 6.4 Campus Directory <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter 0.3%
  • CVE-2025-8315 Medium 6.4 WP Easy Contact <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter 0.3%
  • CVE-2025-5540 Medium 6.4 Event RSVP and Simple Event Management Plugin <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2025-5539 Medium 6.4 Simplify Contact Management: WP Easy Contact <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%