Filters
Software
Wedevs Wp ErpWP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection via vendor_id
8.8
EPSS
0.05%
First published (updated )
Wedevs Happy Addons For ElementorHappy Addons for Elementor <= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading Widget
6.4
EPSS
0.05%
First published (updated )
Wedevs Wemail WordpressWordPress weMail plugin <= 1.14.2 - Broken Access Control vulnerability
5.3
First published (updated )
Wedevs Woocommerce Conversion Tracking WordpressWordPress WooCommerce Conversion Tracking plugin <= 2.0.11 - Broken Access Control vulnerability
6.3
First published (updated )
Wedevs DokanDokan < 3.6.4 - Vendor Stored Cross-Site Scripting
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Wedevs Wp ErpWordPress WP ERP Plugin <= 1.12.8 is vulnerable to SQL Injection
7.6
EPSS
0.05%
First published (updated )
Wedevs Happy Addons For ElementorWordPress Happy Addons for Elementor Plugin <= 3.9.1.1 is vulnerable to Server Side Request Forgery (SSRF)
6.5
First published (updated )
Wedevs DokanWordPress Dokan Plugin <= 3.7.12 is vulnerable to SQL Injection
8.1
First published (updated )
CVE-2023-34382WordPress Dokan Plugin <= 3.7.19 is vulnerable to PHP Object Injection
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Wedevs Wp Project ManagerWordPress WP Project Manager Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)
6.5
First published (updated )
Wedevs Wp Project ManagerWordPress WP Project Manager Plugin <= 2.6.0 is vulnerable to SQL Injection
9.8
First published (updated )
Wedevs Wp Project ManagerThe WP Project Manager plugin for WordPress is vulnerable to privilege escalation in versions up to,…
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Wedevs Happy Addons For ElementorWordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Wedevs Wp ErpWP ERP < 1.12.4 - Reflected Cross-Site Scripting
6.1
First published (updated )
Wedevs Wp User FrontendWP User Frontend < 3.5.29 - Obscure Registration as Admin
9.8
First published (updated )
Wedevs Wp User FrontendWP User Frontend < 3.5.26 - SQL Injection to Reflected Cross-Site Scripting
8.8
First published (updated )
Wedevs Wp Project ManagerWordPress WP Project Manager plugin <= 2.4.13 - Stored Cross-Site Scripting (XSS) vulnerability
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Wedevs Happy Addons For ElementorHappy Addons for Elementor Free < 2.24.0 and Pro < 1.17.0 - Contributor+ Stored XSS
5.4
First published (updated )