CVE Tools
Track your stack

E-plugins

23 CVEs tracked since 2026. Since Jan 2026, none of them reached CISA KEV.

E-plugins CVEs per month

Jan 2026 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
E-plugins CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-01230
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in E-plugins's monthly top three, with their CVEs summed over those months.

  1. Hospital Doctor Directory31 month
  2. Hotel Listing31 month
  3. Institutions Directory31 month

Latest CVEs

The 15 most recently published vulnerabilities affecting E-plugins.

  1. CVE-2026-66649WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability9.3
  2. CVE-2026-28127WordPress Lawyer Directory plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability7.1
  3. CVE-2026-27396WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerability7.3
  4. CVE-2025-69293WordPress Final User plugin <= 1.2.5 - Privilege Escalation vulnerability8.8
  5. CVE-2025-69193WordPress WP Membership plugin <= 1.6.4 - Broken Access Control vulnerability7.3
  6. CVE-2025-69292WordPress WP Membership plugin <= 1.6.4 - Privilege Escalation vulnerability8.8
  7. CVE-2025-69192WordPress Real Estate Pro plugin <= 2.1.5 - Broken Access Control vulnerability7.3
  8. CVE-2025-69191WordPress ListingHub plugin <= 1.2.7 - Broken Access Control vulnerability7.3
  9. CVE-2025-69190WordPress Listihub theme <= 1.0.6 - Broken Access Control vulnerability7.3
  10. CVE-2025-69188WordPress fitness-trainer plugin <= 1.7.1 - Broken Access Control vulnerability7.3
  11. CVE-2025-69187WordPress Final User plugin <= 1.2.5 - Broken Access Control vulnerability7.3
  12. CVE-2025-69186WordPress Hospital Doctor Directory plugin <= 1.3.9 - Broken Access Control vulnerability7.3
  13. CVE-2025-69185WordPress Hotel Listing plugin <= 1.4.2 - Broken Access Control vulnerability7.3
  14. CVE-2025-69184WordPress Institutions Directory plugin <= 1.3.4 - Broken Access Control vulnerability7.3
  15. CVE-2025-69181WordPress Lawyer Directory plugin <= 1.3.4 - Broken Access Control vulnerability7.3

The record

Peak rank
#31 in Jan 2026
Busiest month shown
Jan 2026, 23 CVEs
Months with a KEV entry
0 since Jan 2026
Monthly snapshots
1 since 2026
E-plugins's full record, month by month