Vendor

    Emarket-design

    28 known vulnerabilities in products by Emarket-design, 0 of them actively exploited (CISA KEV).

    Key figures

    28

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Emarket-design
    HighCVE-2026-9848

    WP Ticket <= 6.0.4 - Unauthenticated SQL Injection via WordPress Search 's' Parameter

    		7.5
    CriticalCVE-2026-15011

    Emarket-design Customer Support Ticket System & Helpdesk: Code Injection

    		9.8
    HighCVE-2025-8420

    Emarket-design Video Gallery: Eval Injection

    also in 1 other product

    		8.1
    HighCVE-2026-14249

    Request a Quote Form Plugin <= 2.5.5 - Unauthenticated Code Injection via 'path' Parameter

    		7.5
    HighCVE-2026-12923

    Video Gallery <= 4.0.3 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter

    		7.5
    HighCVE-2026-61995

    WordPress YouTube Showcase plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2026-15790

    Cross-site Scripting (CVE-2026-15790)

    		6.4
    HighCVE-2025-53584

    Emarket-design WP Ticket Customer Service Software & Support Ticket System: Deserialization of Untrusted Data

    		8.1
    HighCVE-2025-53583

    WordPress Employee Spotlight Plugin <= 5.1.1 - PHP Object Injection Vulnerability

    		8.1
    HighCVE-2025-53572

    WordPress WP Easy Contact Plugin <= 4.0.1 - PHP Object Injection Vulnerability

    		8.1
    HighCVE-2025-53243

    Deserialization of Untrusted Data (CVE-2025-53243)

    		8.1
    HighCVE-2025-54731

    WordPress YouTube Showcase Plugin <= 3.5.1 - PHP Object Injection Vulnerability

    		8.1
    MediumCVE-2025-15636

    WordPress YouTube Showcase plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2025-8314

    Cross-site Scripting (CVE-2025-8314)

    		6.4
    MediumCVE-2025-8295

    Emarket-design Employee Directory: Cross-site Scripting

    		6.4
    MediumCVE-2025-8313

    Cross-site Scripting (CVE-2025-8313)

    		6.4
    MediumCVE-2025-8315

    Emarket-design Simple Contact Form Plugin for WordPress: Cross-site Scripting

    		6.4
    MediumCVE-2025-60157

    Emarket-design WP Ticket Customer Service Software & Support Ticket System: Cross-site Scripting

    		6.5
    MediumCVE-2025-12090

    Cross-site Scripting (CVE-2025-12090)

    		6.4
    MediumCVE-2025-58915

    WordPress Request a Quote plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2025-5540

    Emarket-design Event RSVP and Simple Event Management Plugin: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2025-5539

    Emarket-design Simple Contact Form Plugin for WordPress: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2025-5532

    Cross-site Scripting (CVE-2025-5532)

    		6.4
    MediumCVE-2025-5531

    Emarket-design Employee Directory: Cross-site Scripting

    		6.4
    MediumCVE-2024-3268

    Emarket-design Video Gallery: Missing Authorization

    also in 1 other product

    		5.3

    All vulnerabilities in search

    Products

    Products by Emarket-design
    Campus Directory – Faculty, Staff & Student Directory Plugin For Wordpress30
    Simple Contact Form Plugin For Wordpress – Wp Easy Contact30
    Youtube Showcase30