Revmakx vulnerabilities
19 published CVEs name Revmakx among the affected products.
- Published CVEs
- 19
- Last 12 months
- 7
- Critical
- 3
- Known exploited
- 0
Critical 3High 8Medium 8Low 0Not scored 0
CVEs per yearBy the year they were published
- 20231
- 20247
- 20255
- 20266
Newest CVEs
- CVE-2026-39755
WordPress WP Duplicate plugin <= 1.1.11 - Arbitrary File Upload vulnerability
revmakx · WP Duplicate
Critical9.9 - CVE-2026-17576
InfiniteWP Client <= 1.13.9 - Authenticated (Admin+) SQL Injection via 'iwp_get_comments_*' Array Key
revmakx · InfiniteWP Client
Medium6.5 - CVE-2026-74011
WordPress InfiniteWP Client plugin <= 1.13.9 - SQL Injection vulnerability
revmakx · InfiniteWP Client
High7.6 - CVE-2026-8996
Backup and Staging by WP Time Capsule <= 1.22.26 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via download_recent_decrypted_file_wptc Function
revmakx · Backup and Staging by WP Time Capsule
Medium6.5 - CVE-2026-42760
WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.25 - Broken Authentication vulnerability
revmakx · Backup and Staging by WP Time Capsule
High7.5 - CVE-2026-1499
WP Duplicate <= 1.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via 'process_add_site' AJAX Action
revmakx · WP Duplicate – WordPress Migration Plugin
High8.8 - CVE-2025-66103
WordPress WPCal.io plugin <= 0.9.5.9 - Cross Site Scripting (XSS) vulnerability
revmakx · WPCal.io
Medium6.5 - CVE-2025-47477
WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.23 - Reflected Cross Site Scripting (XSS) vulnerability
revmakx · Backup and Staging by WP Time Capsule
High7.1 - CVE-2025-22280
WordPress DefendWP Firewall Plugin <= 1.1.0 - Broken Access Control vulnerability
revmakx · DefendWP Firewall
High7.6 - CVE-2025-24652
WordPress WP Duplicate plugin <= 1.1.6 - Broken Access Control vulnerability
revmakx · WP Duplicate
Medium5.4
Products with the most CVEs
Most common weaknesses
- CWE-862 Missing authorization4
- CWE-89 SQL injection3
- CWE-352 Cross-site request forgery (CSRF)2
- CWE-434 Unrestricted file upload2
- CWE-79 Cross-site scripting (XSS)2
- CWE-200 Exposure of sensitive information1
- CWE-22 Path traversal1
- CWE-269 Improper privilege management1
- CWE-288 1
- CWE-502 Deserialization of untrusted data1