WPExperts vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20242
3. 202610

Newest CVEs

• CVE-2026-119466

  WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Cross Site Request Forgery (CSRF) vulnerability

  WPExperts · APIExperts Square for WooCommerce

  Medium5.4
• CVE-2026-115959

  WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

  WPExperts · APIExperts Square for WooCommerce

  Medium5.3
• CVE-2026-115960

  WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

  WPExperts · APIExperts Square for WooCommerce

  Medium4.3
• CVE-2026-110365

  WordPress Advanced File Manager plugin <= 5.4.14 - Broken Access Control vulnerability

  WPExperts · Advanced File Manager

  Medium6.5
• CVE-2026-96449

  WordPress WP EasyPay plugin <= 4.5.4 - Broken Access Control vulnerability

  WPExperts · WP EasyPay

  Medium5.3
• CVE-2026-110367

  WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

  WPExperts · APIExperts Square for WooCommerce

  Medium5.3
• CVE-2026-62058

  WordPress CF7 Apps plugin <= 3.7.2 - Sensitive Data Exposure vulnerability

  WPExperts · CF7 Apps

  Medium5.3
• CVE-2026-81278

  WordPress Post SMTP plugin 4.0.0-beta.1 - Settings Change vulnerability

  WPExperts · Post SMTP

  Medium5.4
• CVE-2026-32466

  WordPress Gravity Forms Bookings premium plugin <= 2.1 - SQL Injection vulnerability

  WPExperts · Gravity Forms Bookings premium

  High8.5
• CVE-2026-48838

  WordPress Post SMTP plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability

  WPExperts · Post SMTP

  High7.1