loopus vulnerabilities

CVEs per yearBy the year they were published

1. 20244
2. 20254
3. 20267

Newest CVEs

• CVE-2026-9253

  WP Cost Estimation & Payment Forms Builder (E&P Forms) <= 10.5.97 - Unauthenticated Stored Cross-Site Scripting via 'customerInfos' Parameter

  loopus · WP Cost Estimation & Payment Forms Builder

  High7.2
• CVE-2026-24363

  WordPress WP Cost Estimation & Payment Forms Builder plugin < 10.3.0 - Broken Access Control vulnerability

  loopus · WP Cost Estimation & Payment Forms Builder

  High7.5
• CVE-2026-28115

  WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - SQL Injection vulnerability

  loopus · WP Attractive Donations System - Easy Stripe & Paypal donations

  Critical9.3
• CVE-2025-22725

  WordPress WP Virtual Assistant plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability

  loopus · WP Virtual Assistant

  High7.1
• CVE-2025-22715

  WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - Arbitrary Content Deletion vulnerability

  loopus · WP Attractive Donations System - Easy Stripe & Paypal donations

  High7.5
• CVE-2019-25296

  WP Cost Estimation <= 9.642 - Missing Authorization to Arbitrary File Upload/Delete

  loopus · WP Cost Estimation & Payment Forms Builder

  Critical9.8
• CVE-2019-25295

  WP Cost Estimation < 9.660 - Upload Directory Traversal

  loopus · WP Cost Estimation & Payment Forms Builder

  Medium6.5
• CVE-2025-58999

  WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - Cross Site Request Forgery (CSRF) vulnerability

  loopus · WP Attractive Donations System - Easy Stripe & Paypal donations

  Medium4.3
• CVE-2025-60155

  WordPress WP Virtual Assistant Plugin <= 3.0 - Broken Access Control Vulnerability

  loopus · WP Virtual Assistant

  Medium5.3
• CVE-2025-58956

  WordPress WP Attractive Donations System Plugin < 1.29 - Cross Site Request Forgery (CSRF) Vulnerability

  loopus · WP Attractive Donations System

  High7.1