saadiqbal vulnerabilities

CVEs per yearBy the year they were published

1. 20234
2. 202417
3. 202514
4. 202621

Newest CVEs

• CVE-2026-107630

  Email Templates Customizer and Designer for WordPress and WooCommerce <= 1.5.14 - Missing Authorization to Unauthenticated Order PII Disclosure via 'preview_order' Parameter

  saadiqbal · Email Templates Customizer and Designer for WordPress and WooCommerce

  High7.5
• CVE-2026-93293

  Password Protected <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Freemius purchase_completed Handler

  saadiqbal · Password Protected – Protect Your Site Content With a Password

  Medium6.4
• CVE-2026-77871

  Post Snippets <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

  saadiqbal · Post Snippets – Custom WordPress Code Snippets Customizer

  Medium6.4
• CVE-2026-75962

  Post SMTP <= 4.0.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user_email' Parameter (Multisite Registration → Failed Email Log)

  saadiqbal · Post SMTP – Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App

  High7.2
• CVE-2026-12739

  WP Easy Pay <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion

  saadiqbal · WP Easy Pay – Payment and Donation Form Builder for Square

  Medium4.3
• CVE-2026-17149

  myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute

  saadiqbal · Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred

  Medium6.4
• CVE-2026-15009

  Advanced File Manager <= 5.4.12 - Reflected Cross-Site Scripting via postMessage 'soundFile' Parameter

  saadiqbal · Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution

  Medium6.1
• CVE-2026-6627

  WPFormify <= 1.1.1 - Missing Authorization

  saadiqbal · WPFormify – Stripe Payments with Form and Checkout

  High8.2
• CVE-2026-11995

  Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 - Missing Authorization to Unauthenticated Arbitrary Form Entry Modification/Trash via process_bulk_action()

  saadiqbal · Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder

  Medium5.3
• CVE-2026-12144

  Wholesale for WooCommerce <= 2.0.5 - Authenticated (Author+) Privilege Escalation via 'user_role_set' Parameter

  saadiqbal · Wholesale for WooCommerce

  High8.8