Skip to content
OpenAdvisories

Product · Webaholicson

Epicwin Plugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2025-28986

    WordPress Epicwin Plugin plugin <= 1.5 - CSRF to SQL Injection vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Webaholicson Epicwin Plugin epicwin-subscribers allows SQL Injection.This issue affects Epicwin Plugin: from n/a through <= 1.5.

    Webaholicson Epicwin Plugin