EM
Vendor
emarket-design
33
CVEs
0
On KEV
1
New 30D
Products
YS8.1
YouTube Showcase
emarket-design
3 CVEs0 on KEV1 new
CD8.1
Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress
emarket-design
3 CVEs0 on KEV0 new
SC8.1
Simple Contact Form Plugin for WordPress – WP Easy Contact
emarket-design
3 CVEs0 on KEV0 new
CS9.8
Customer Support Ticket System & Helpdesk
emarket-design
2 CVEs0 on KEV0 new
ED6.4
Employee Directory – Staff & Team Directory
emarket-design
2 CVEs0 on KEV0 new
ES6.4
Employee Spotlight – Team Member Showcase & Meet the Team Plugin
emarket-design
2 CVEs0 on KEV0 new
ER8.1
Event RSVP and Simple Event Management Plugin
emarket-design
2 CVEs0 on KEV0 new
PM8.1
Project Management, Bug and Issue Tracking Plugin – Software Issue Manager
emarket-design
2 CVEs0 on KEV0 new
RA6.5
Request a Quote
emarket-design
2 CVEs0 on KEV0 new
VG7.5
Video Gallery – YouTube Gallery, Playlist & Video Grid
emarket-design
2 CVEs0 on KEV0 new
VG8.1
Video Gallery – YouTube Gallery & Responsive Video Playlist
emarket-design
2 CVEs0 on KEV0 new
WT8.1
WP Ticket Customer Service Software & Support Ticket System
emarket-design
2 CVEs0 on KEV0 new
CS8.1
Customer Support Ticket System & Helpdesk Plugin for WordPress
emarket-design
1 CVEs0 on KEV0 new
ED8.1
Employee Directory – Staff Listing & Team Directory Plugin for WordPress
emarket-design
1 CVEs0 on KEV0 new
ES8.1
Employee Spotlight
emarket-design
1 CVEs0 on KEV0 new
RA8.1
Request a Quote Form Plugin – Price Quote Request Management Made Easy
emarket-design
1 CVEs0 on KEV0 new
RA7.5
Request a Quote – Quote Forms for Any WordPress Site
emarket-design
1 CVEs0 on KEV0 new
WE8.1
WP Easy Contact
emarket-design
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-61995 New | YS YouTube Showcase emarket-design | 7.1 | Oct 29 | WordPress YouTube Showcase plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-15790 | VG Video Gallery – YouTube Gallery, Playlist & Video Grid emarket-design | 6.4 | Aug 16 | Video Gallery <= 4.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment 'post_title' via emd_mb_meta Shortcode |
| CVE-2026-15011 | CS Customer Support Ticket System & Helpdesk emarket-design | 9.8 | Jul 23 | Customer Support Ticket System & Helpdesk <= 6.0.5 - Unauthenticated Code Injection via 'path' Parameter |
| CVE-2026-14249 | RA Request a Quote – Quote Forms for Any WordPress Site emarket-design | 7.5 | Jul 2 | Request a Quote Form Plugin <= 2.5.5 - Unauthenticated Code Injection via 'path' Parameter |
| CVE-2026-12923 | VG Video Gallery – YouTube Gallery, Playlist & Video Grid emarket-design | 7.5 | Jul 1 | Video Gallery <= 4.0.3 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter |
| CVE-2026-9848 | CS Customer Support Ticket System & Helpdesk emarket-design | 7.5 | Jun 13 | WP Ticket <= 6.0.4 - Unauthenticated SQL Injection via WordPress Search 's' Parameter |
| CVE-2025-15636 | YS YouTube Showcase emarket-design | 6.5 | Apr 15 | WordPress YouTube Showcase plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-64248 | RA Request a Quote emarket-design | 4.3 | Dec 16 | WordPress Request a Quote plugin <= 2.5.3 - Broken Access Control vulnerability |
| CVE-2025-13403 | ES Employee Spotlight – Team Member Showcase & Meet the Team Plugin emarket-design | 4.3 | Dec 13 | Employee Spotlight – Team Member Showcase & Meet the Team Plugin <= 5.1.3 - Missing Authorization to Authenticated (Subscriber+) Tracking Opt-In/Opt-Out Modification |
| CVE-2025-12090 | ES Employee Spotlight – Team Member Showcase & Meet the Team Plugin emarket-design | 6.4 | Nov 1 | Employee Spotlight – Team Member Showcase & Meet the Team Plugin <= 5.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-60157 | WT WP Ticket Customer Service Software & Support Ticket System emarket-design | 6.5 | Sep 26 | WordPress WP Ticket Customer Service Software & Support Ticket System Plugin <= 6.0.2 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-58915 | RA Request a Quote emarket-design | 6.5 | Sep 23 | WordPress Request a Quote plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-54731 | YS YouTube Showcase emarket-design | 8.1 | Aug 28 | WordPress YouTube Showcase Plugin <= 3.5.1 - PHP Object Injection Vulnerability |
| CVE-2025-53584 | WT WP Ticket Customer Service Software & Support Ticket System emarket-design | 8.1 | Aug 28 | WordPress WP Ticket Customer Service Software & Support Ticket System Plugin <= 6.0.2 - PHP Object Injection Vulnerability |
| CVE-2025-53583 | ES Employee Spotlight emarket-design | 8.1 | Aug 28 | WordPress Employee Spotlight Plugin <= 5.1.1 - PHP Object Injection Vulnerability |
| CVE-2025-53572 | WE WP Easy Contact emarket-design | 8.1 | Aug 28 | WordPress WP Easy Contact Plugin <= 4.0.1 - PHP Object Injection Vulnerability |
| CVE-2025-53243 | ED Employee Directory – Staff Listing & Team Directory Plugin for WordPress emarket-design | 8.1 | Aug 28 | WordPress Employee Directory – Staff Listing & Team Directory plugin for WordPress plugin <= 4.5.5 - PHP Object Injection vulnerability |
| CVE-2025-8314 | PM Project Management, Bug and Issue Tracking Plugin – Software Issue Manager emarket-design | 6.4 | Aug 12 | Software Issue Manager <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter |
| CVE-2025-8420 | RA Request a Quote Form Plugin – Price Quote Request Management Made Easy emarket-design | 8.1 | Aug 6 | Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution |
| CVE-2025-8295 | ED Employee Directory – Staff & Team Directory emarket-design | 6.4 | Aug 5 | Employee Directory <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter |
| CVE-2025-8313 | CD Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress emarket-design | 6.4 | Aug 5 | Campus Directory <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter |
| CVE-2025-8315 | SC Simple Contact Form Plugin for WordPress – WP Easy Contact emarket-design | 6.4 | Aug 5 | WP Easy Contact <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter |
| CVE-2025-5540 | ER Event RSVP and Simple Event Management Plugin emarket-design | 5.4 | Jun 26 | Event RSVP and Simple Event Management Plugin <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-5539 | SC Simple Contact Form Plugin for WordPress – WP Easy Contact emarket-design | 6.4 | Jun 4 | Simplify Contact Management: WP Easy Contact <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-5532 | CD Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress emarket-design | 6.4 | Jun 4 | Faculty Staff and Student Directory Plugin – Campus Directory <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-5531 | ED Employee Directory – Staff & Team Directory emarket-design | 6.4 | Jun 4 | Staff Directory – Employee Directory for WordPress <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-3268 | VG Video Gallery – YouTube Gallery & Responsive Video Playlist emarket-design | 5.3 | May 21 | YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress <= 3.3.6 - Missing Authorization to Arbitrary Post/Page Creation |
