WordPress plugin
Easy Updates Manager security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All Easy Updates Manager vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting via 'paged' Parameter ≤9.0.20Update to 9.0.21 | CVE-2026-7660 | |
| Medium4.3 | Insufficient Restrictions on Option Changes ≤8.0.4Update to 8.0.5 | CVE-2019-15650 |
- Medium6.1Reflected Cross-Site Scripting via 'paged' Parameter
≤9.0.20Update to 9.0.21
- Medium4.3Insufficient Restrictions on Option Changes
≤8.0.4Update to 8.0.5
Easy Updates Manager: common questions
Does Easy Updates Manager have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Easy Updates Manager: 2 medium. None are known to affect version null.
How do I check which version of Easy Updates Manager I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Easy Updates Manager vulnerability?
CVE-2026-7660, published May 27, 2026: Easy Updates Manager <= 9.0.20 - Reflected Cross-Site Scripting via 'paged' Parameter. Severity: Medium (CVSS 6.1).
Is any Easy Updates Manager vulnerability listed in CISA KEV?
No. None of the known Easy Updates Manager vulnerabilities is currently listed in the CISA KEV catalog.