Easypromos Plugin

Easypromos Plugin has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Easypromos Plugin has a vendor fix available, so running the current release closes it.

All of these findings were reported by SOPROBRO.

01234567891018.02.2025Today18.02.20256.4Easypromos Plugin <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVSS 6.4 · 18.02.2025

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Easypromos Plugin vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-13443

Easypromos Plugin <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C