Advisories · Technology

e-plugins Directory Pro.

Every CVE that names e-plugins Directory Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-66649 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability
- e-plugins Directory Pro
- SQL injection
Not analysed yet 20 Aug 2026
CVE-2026-27396 CVE record

CVSS 7.3 High

WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerability
- e-plugins Directory Pro
- Broken access control
Not analysed yet 5 Mar 2026
CVE-2025-64243 CVE record

CVSS 4.3 Medium

WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerability
- e-plugins Directory Pro
- Broken access control
Not analysed yet 16 Dec 2025
CVE-2025-52748 CVE record

CVSS 7.1 High

WordPress Directory Pro plugin <= 2.5.5 - Cross Site Scripting (XSS) Vulnerability
- e-plugins Directory Pro
- Cross-site scripting (XSS)
Not analysed yet 22 Oct 2025
CVE-2025-57948 CVE record

CVSS 6.5 Medium

WordPress Directory Pro Plugin <= 2.5.5 - Cross Site Scripting (XSS) Vulnerability
- e-plugins Directory Pro
- Cross-site scripting (XSS)
Not analysed yet 22 Sept 2025