Stiofan vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20255
3. 20267

Newest CVEs

• CVE-2026-115609

  WordPress GetPaid plugin <= 2.8.62 - Cross Site Scripting (XSS) vulnerability

  Stiofan · GetPaid

  High7.1
• CVE-2026-94641

  WordPress UsersWP plugin <= 1.2.73 - Cross Site Scripting (XSS) vulnerability

  Stiofan · UsersWP

  High7.1
• CVE-2026-94632

  WordPress BlockStrap Page Builder - Bootstrap Blocks plugin <= 0.1.58 - Cross Site Scripting (XSS) vulnerability

  Stiofan · BlockStrap Page Builder - Bootstrap Blocks

  High7.1
• CVE-2026-103086

  WordPress UsersWP plugin <= 1.2.74 - Broken Access Control vulnerability

  Stiofan · UsersWP

  Medium6.5
• CVE-2026-39532

  WordPress Events Calendar for GeoDirectory plugin <= 2.3.25 - PHP Object Injection vulnerability

  Stiofan · Events Calendar for GeoDirectory

  High8.8
• CVE-2026-49064

  WordPress GetPaid plugin <= 2.8.49 - Sensitive Data Exposure vulnerability

  Stiofan · GetPaid

  High7.5
• CVE-2026-25015

  WordPress UsersWP plugin <= 1.2.53 - Cross Site Request Forgery (CSRF) vulnerability

  Stiofan · UsersWP

  Medium4.3
• CVE-2025-67593

  WordPress UsersWP plugin <= 1.2.48 - Cross Site Request Forgery (CSRF) vulnerability

  Stiofan · UsersWP

  Medium4.3
• CVE-2025-66072

  WordPress UsersWP plugin <= 1.2.47 - Broken Access Control vulnerability

  Stiofan · UsersWP

  Medium5.3
• CVE-2025-30951

  WordPress BlockStrap Page Builder - Bootstrap Blocks plugin <= 0.1.36 - Cross Site Scripting (XSS) Vulnerability

  Stiofan · BlockStrap Page Builder - Bootstrap Blocks

  Medium6.5