EM
Vendor
emarket-design
18 products with CVEs on record
33
CVEs
0
On KEV
1
New 30D
Products
YS
YouTube Showcase
emarket-design
8.1
3 CVEs0 on KEV1 new
CD
Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress
emarket-design
8.1
3 CVEs0 on KEV0 new
SC
Simple Contact Form Plugin for WordPress – WP Easy Contact
emarket-design
8.1
3 CVEs0 on KEV0 new
CS
Customer Support Ticket System & Helpdesk
emarket-design
9.8
2 CVEs0 on KEV0 new
ED
Employee Directory – Staff & Team Directory
emarket-design
6.4
2 CVEs0 on KEV0 new
ES
Employee Spotlight – Team Member Showcase & Meet the Team Plugin
emarket-design
6.4
2 CVEs0 on KEV0 new
ER
Event RSVP and Simple Event Management Plugin
emarket-design
8.1
2 CVEs0 on KEV0 new
PM
Project Management, Bug and Issue Tracking Plugin – Software Issue Manager
emarket-design
8.1
2 CVEs0 on KEV0 new
RA
Request a Quote
emarket-design
6.5
2 CVEs0 on KEV0 new
VG
Video Gallery – YouTube Gallery, Playlist & Video Grid
emarket-design
7.5
2 CVEs0 on KEV0 new
VG
Video Gallery – YouTube Gallery & Responsive Video Playlist
emarket-design
8.1
2 CVEs0 on KEV0 new
WT
WP Ticket Customer Service Software & Support Ticket System
emarket-design
8.1
2 CVEs0 on KEV0 new
CS
Customer Support Ticket System & Helpdesk Plugin for WordPress
emarket-design
8.1
1 CVEs0 on KEV0 new
ED
Employee Directory – Staff Listing & Team Directory Plugin for WordPress
emarket-design
8.1
1 CVEs0 on KEV0 new
ES
Employee Spotlight
emarket-design
8.1
1 CVEs0 on KEV0 new
RA
Request a Quote Form Plugin – Price Quote Request Management Made Easy
emarket-design
8.1
1 CVEs0 on KEV0 new
RA
Request a Quote – Quote Forms for Any WordPress Site
emarket-design
7.5
1 CVEs0 on KEV0 new
WE
WP Easy Contact
emarket-design
8.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-61995
New
YS
YouTube Showcase
emarket-design
7.1–Oct 29WordPress YouTube Showcase plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-15790
VG
Video Gallery – YouTube Gallery, Playlist & Video Grid
emarket-design
6.4
0%
Aug 16Video Gallery <= 4.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment 'post_title' via emd_mb_meta Shortcode
CVE-2026-15011
CS
Customer Support Ticket System & Helpdesk
emarket-design
9.8
1%
Jul 23Customer Support Ticket System & Helpdesk <= 6.0.5 - Unauthenticated Code Injection via 'path' Parameter
CVE-2026-14249
RA
Request a Quote – Quote Forms for Any WordPress Site
emarket-design
7.5
1%
Jul 2Request a Quote Form Plugin <= 2.5.5 - Unauthenticated Code Injection via 'path' Parameter
CVE-2026-12923
VG
Video Gallery – YouTube Gallery, Playlist & Video Grid
emarket-design
7.5
1%
Jul 1Video Gallery <= 4.0.3 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter
CVE-2026-9848
CS
Customer Support Ticket System & Helpdesk
emarket-design
7.5
2%
Jun 13WP Ticket <= 6.0.4 - Unauthenticated SQL Injection via WordPress Search 's' Parameter
CVE-2025-15636
YS
YouTube Showcase
emarket-design
6.5
0%
Apr 15WordPress YouTube Showcase plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64248
RA
Request a Quote
emarket-design
4.3
0%
Dec 16WordPress Request a Quote plugin <= 2.5.3 - Broken Access Control vulnerability
CVE-2025-13403
ES
Employee Spotlight – Team Member Showcase & Meet the Team Plugin
emarket-design
4.3
0%
Dec 13Employee Spotlight – Team Member Showcase & Meet the Team Plugin <= 5.1.3 - Missing Authorization to Authenticated (Subscriber+) Tracking Opt-In/Opt-Out Modification
CVE-2025-12090
ES
Employee Spotlight – Team Member Showcase & Meet the Team Plugin
emarket-design
6.4
0%
Nov 1Employee Spotlight – Team Member Showcase & Meet the Team Plugin <= 5.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-60157
WT
WP Ticket Customer Service Software & Support Ticket System
emarket-design
6.5
0%
Sep 26WordPress WP Ticket Customer Service Software & Support Ticket System Plugin <= 6.0.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58915
RA
Request a Quote
emarket-design
6.5
0%
Sep 23WordPress Request a Quote plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-54731
YS
YouTube Showcase
emarket-design
8.1
0%
Aug 28WordPress YouTube Showcase Plugin <= 3.5.1 - PHP Object Injection Vulnerability
CVE-2025-53584
WT
WP Ticket Customer Service Software & Support Ticket System
emarket-design
8.1
0%
Aug 28WordPress WP Ticket Customer Service Software & Support Ticket System Plugin <= 6.0.2 - PHP Object Injection Vulnerability
CVE-2025-53583
ES
Employee Spotlight
emarket-design
8.1
0%
Aug 28WordPress Employee Spotlight Plugin <= 5.1.1 - PHP Object Injection Vulnerability
CVE-2025-53572
WE
WP Easy Contact
emarket-design
8.1
0%
Aug 28WordPress WP Easy Contact Plugin <= 4.0.1 - PHP Object Injection Vulnerability
CVE-2025-53243
ED
Employee Directory – Staff Listing & Team Directory Plugin for WordPress
emarket-design
8.1
0%
Aug 28WordPress Employee Directory – Staff Listing & Team Directory plugin for WordPress plugin <= 4.5.5 - PHP Object Injection vulnerability
CVE-2025-8314
PM
Project Management, Bug and Issue Tracking Plugin – Software Issue Manager
emarket-design
6.4
0%
Aug 12Software Issue Manager <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter
CVE-2025-8420
RA
Request a Quote Form Plugin – Price Quote Request Management Made Easy
emarket-design
8.1
1%
Aug 6Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution
CVE-2025-8295
ED
Employee Directory – Staff & Team Directory
emarket-design
6.4
0%
Aug 5Employee Directory <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter
CVE-2025-8313
CD
Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress
emarket-design
6.4
0%
Aug 5Campus Directory <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter
CVE-2025-8315
SC
Simple Contact Form Plugin for WordPress – WP Easy Contact
emarket-design
6.4
0%
Aug 5WP Easy Contact <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter
CVE-2025-5540
ER
Event RSVP and Simple Event Management Plugin
emarket-design
5.4
0%
Jun 26Event RSVP and Simple Event Management Plugin <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-5539
SC
Simple Contact Form Plugin for WordPress – WP Easy Contact
emarket-design
6.4
0%
Jun 4Simplify Contact Management: WP Easy Contact <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-5532
CD
Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress
emarket-design
6.4
0%
Jun 4Faculty Staff and Student Directory Plugin – Campus Directory <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-5531
ED
Employee Directory – Staff & Team Directory
emarket-design
6.4
0%
Jun 4Staff Directory – Employee Directory for WordPress <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-3268
VG
Video Gallery – YouTube Gallery & Responsive Video Playlist
emarket-design
5.3
0%
May 21YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress <= 3.3.6 - Missing Authorization to Arbitrary Post/Page Creation