Skip to content
OpenAdvisories

Vendor

e-plugins

33 known vulnerabilities.

Products

Directory Pro 5 Lawyer Directory 4 Hotel Listing 4 WP Membership 4 Institutions Directory 4 Hospital Doctor Directory 3 Final User 2 Real Estate Pro 2 ListingHub 2 Listihub 1 JobBank 1 fitness-trainer 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-66649

    WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability

    Unauthenticated SQL Injection in Directory Pro <= 2.5.8 versions.

    e-plugins Directory Pro
  • Critical 9.8
    CVE-2024-10547

    WP Membership <= 1.6.2 - Unauthenticated Arbitrary File Upload

    The WP Membership plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the user_profile_image_upload() function in all versions up to, and including, 1.6.2. This makes it possible for unauthenticated attackers to…

    e-plugins WP Membership Web / CMS