WPKube vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20232
3. 20246
4. 20255
5. 20263

Newest CVEs

• CVE-2026-32469

  WordPress CAPTCHA 4WP plugin <= 7.6.0 - Captcha Bypass vulnerability

  WPKube · CAPTCHA 4WP

  Medium5.3
• CVE-2026-4409

  Subscribe To Comments Reloaded <= 240119 - Improper Authorization to Unauthenticated Arbitrary Subscription Management

  wpkube · Subscribe To Comments Reloaded

  Medium6.5
• CVE-2025-69011

  WordPress Cool Tag Cloud plugin <= 2.29 - Cross Site Scripting (XSS) vulnerability

  WPKube · Cool Tag Cloud

  Medium6.5
• CVE-2025-13614

  Cool Tag Cloud <= 2.29 - Authenticated (Contributor+) Stored Cross-Site Scripting

  wpkube · Cool Tag Cloud

  High8.1
• CVE-2025-12010

  Authors List <= 2.0.6.1 - Authenticated (Contributor+) Sensitive Information Exposure via Limited Method Call in Plugin's Shortcode

  wpkube · Authors List

  Medium6.5
• CVE-2025-58792

  WordPress Authors List plugin <= 2.0.6.2 - Cross Site Request Forgery (CSRF) vulnerability

  WPKube · Authors List

  Medium4.3
• CVE-2025-58790

  WordPress Kiwi Plugin <= 2.1.8 - Cross Site Scripting (XSS) Vulnerability

  WPKube · Kiwi

  Medium6.5
• CVE-2024-13806

  Authors List <= 2.0.6 - Unauthenticated Arbitrary Shortcode Execution

  wpkube · Authors List

  Medium6.5
• CVE-2024-10952

  Authors List <= 2.0.4 - Unauthenticated Arbitrary Shortcode Execution via update_authors_list_ajax

  wpkube · Authors List

  High7.3
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3