Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how wedevs compares to other vendors in security performance

View Risk Score →

weDevs Dokan ProDokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' Parameters

Risk 43
Severity
7.5
First published (updated )
CVE-2026-12077

weDevs Dokan ProDokan Pro <= 5.0.4 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter

Risk 38
Severity
6.5
First published (updated )
CVE-2026-12079

weDevs DokanDokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.3 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Order Modification via Multiple AJAX Handlers

Risk 22
Severity
4.3
First published (updated )
CVE-2026-10023

weDevs WooCommerce Frontend Manager - UltimateWordPress WooCommerce Frontend Manager – Ultimate plugin < 6.7.7 - SQL Injection vulnerability

Risk 55
Severity
8.5
First published (updated )
CVE-2026-22335

weDevs weMailweMail < 2.1.3 - Reflected Cross-Site Scripting

Risk 50
Severity
7.1
First published (updated )
CVE-2026-8089
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

weDevs WooCommerce Conversion TrackingWordPress WooCommerce Conversion Tracking plugin <= 2.0.10 - Cross-Site Request Forgery (CSRF) vulnerability

Risk 22
Severity
4.3
First published (updated )
CVE-2022-47150

weDevs User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User RegistrationUser Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Authenticated (Subscriber+) PHP Object Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2026-5127

weDevs Happy Addons for ElementorWordPress Happy Addons for Elementor plugin <= 3.20.8 - Sensitive Data Exposure vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2026-25468

weDevs Dokan (Pro)Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 4.3.1 - Unauthenticated Information Disclosure in Store Reviews REST API Endpoint

Risk 27
Severity
5.3
First published (updated )
CVE-2026-3504

weDevs WP User FrontendWordPress WP User Frontend plugin <= 4.3.1 - Broken Access Control vulnerability

Risk 40
Severity
6.5
First published (updated )
CVE-2026-42412
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

weDevs MetForm ProMetForm Pro <= 3.9.7 - Unauthenticated Payment Amount Manipulation via 'mf-calculation'

Risk 27
Severity
5.3
First published (updated )
CVE-2026-1782

weDevs WP User FrontendWordPress WP User Frontend plugin <= 4.2.8 - Broken Access Control vulnerability

Risk 43
Severity
7.5
First published (updated )
CVE-2026-32485

weDevs WP User FrontendWordPress WP User Frontend plugin <= 4.2.5 - Broken Access Control vulnerability

Risk 38
Severity
6.5
First published (updated )
CVE-2026-24364

weDevs Dokan ProWordPress Dokan Pro plugin <= 3.14.5 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
First published (updated )
CVE-2025-39497

weDevs WP Project ManagerWordPress WP Project Manager plugin <= 3.0.1 - Sensitive Data Exposure vulnerability

Risk 38
Severity
6.5
First published (updated )
CVE-2025-68040
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

weDevs WP Project Manager (wedevs-project-manager)WordPress WP Project Manager Plugin <= 2.6.25 - Sensitive Data Exposure Vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2025-58269

weDevs WP User FrontendWordPress WP User Frontend Plugin <= 4.1.12 - Broken Access Control Vulnerability

Risk 34
Severity
5.4
First published (updated )
CVE-2025-58672

weDevs WP User FrontendWordPress WP User Frontend Plugin <= 4.1.12 - Content Injection Vulnerability

Risk 34
Severity
5.4
First published (updated )
CVE-2025-58673

WooCommerce WP ERPWP ERP | Complete HR solution with recruitment < 1.13.4 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-12808

WP ERP WP ERPWP ERP < 1.13.4 - Custom+ Unauthorized Access to Terminated Employee Information

Risk 43
Severity
7.5
First published (updated )
CVE-2024-12812
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

weDevs weMailWordPress weMail plugin <= 1.14.13 - Sensitive Data Exposure Vulnerability

Risk 31
Severity
7.5
EPSS
0.04%
First published (updated )
CVE-2025-47540

weDevs Appsero HelperWordPress Appsero Helper plugin <= 1.3.4 - SQL Injection vulnerability

Risk 40
Severity
8.5
EPSS
0.03%
First published (updated )
CVE-2025-39377

weDevs Wp Project Manager WordpressWP Project Manager <= 2.6.22 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

Risk 39
Severity
6.4
First published (updated )
CVE-2025-2541

WP Project Manager WP Project ManagerWP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload

Risk 28
Severity
6.4
EPSS
0.02%
First published (updated )
CVE-2025-3100

weDevs Wp Project Manager WordpressWordPress WP Project Manager plugin < 2.6.25 - Cross Site Request Forgery (CSRF) Vulnerability

Risk 56
Severity
8.8
EPSS
0.02%
First published (updated )
CVE-2025-32280
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

weDevs Wp Project Manager WordpressWordPress WP Project Manager plugin <= 2.6.22 - Cross Site Scripting (XSS) vulnerability

Risk 29
Severity
5.9
First published (updated )
CVE-2025-22649

weDevs WP ERPWordPress WP ERP plugin <= 1.13.4 - Broken Access Control vulnerability

Risk 22
Severity
5.4
EPSS
0.04%
First published (updated )
CVE-2025-30896

WP Project Manager WP Project ManagerWP Project Manager <= 2.6.17 - Authenticated (Subscriber+) SQL Injection via orderby Parameter

Risk 38
Severity
6.5
First published (updated )
CVE-2024-13500

WP Project Manager WP Project ManagerWP Project Manager <= 2.6.17 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update

Risk 38
Severity
6.5
First published (updated )
CVE-2024-13752

Happy Addons Happy Addons for ElementorHappy Addons for Elementor <= 3.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Risk 39
Severity
6.4
First published (updated )
CVE-2024-12852
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203