fullworks vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20238
3. 20245
4. 20252
5. 20263

Newest CVEs

• CVE-2026-110017

  Quick PayPal Payments: Payment Button & Form <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'form' Shortcode Attribute

  fullworks · Quick PayPal Payments: Payment Button & Form

  Medium6.4
• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2026-39535

  WordPress Display Eventbrite Events plugin <= 6.5.6 - Broken Access Control vulnerability

  fullworks · Display Eventbrite Events

  Medium5.3
• CVE-2025-27003

  WordPress Quick Paypal Payments Plugin <= 5.7.46 - Cross Site Request Forgery (CSRF) vulnerability

  fullworks · Quick Paypal Payments

  Medium4.3
• CVE-2025-47510

  WordPress Display Eventbrite Events plugin < 6.3 - Local File Inclusion Vulnerability

  fullworks · Display Eventbrite Events

  High7.5
• CVE-2023-23975

  WordPress Quick Event Manager plugin <= 9.7.4 - Broken Access Control vulnerability

  Fullworks · Quick Event Manager

  Medium5.3
• CVE-2023-25035

  WordPress Quick Contact Form plugin <= 8.0.3.1 - Broken Access Control vulnerability

  Fullworks · Quick Contact Form

  Medium6.5
• CVE-2023-25714

  WordPress Quick Paypal Payments plugin <= 5.7.25 - Broken Access Control vulnerability

  Fullworks · Quick Paypal Payments

  High7.5
• CVE-2024-10621

  Simple Shortcode for Google Maps <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  fullworks · Simple Shortcode for Google Maps

  Medium6.4
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3