E-plugins Lawyer Directory vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting E-plugins Lawyer Directory: 4 record(s), with affected versions and fixes.
CVE-2026-28127
High · 7.1
CWE-79 Mar 5, 2026
WordPress Lawyer Directory plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Lawyer Directory lawyer-directory allows Reflected XSS.This issue affects Lawyer Directory: from n/a through <= 1.3.2.
CVE-2025-69181
High · 7.3
CWE-862 Jan 22, 2026
WordPress Lawyer Directory plugin <= 1.3.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lawyer Directory: from n/a through <= 1.3.4.
CVE-2025-67967
High · 7.6
CWE-862 Jan 22, 2026
WordPress Lawyer Directory plugin <= 1.3.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lawyer Directory: from n/a through <= 1.3.3.
CVE-2025-67966
High · 8.8
CWE-266 Jan 22, 2026
WordPress Lawyer Directory plugin <= 1.3.3 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in e-plugins Lawyer Directory lawyer-directory allows Privilege Escalation.This issue affects Lawyer Directory: from n/a through <= 1.3.3.