webfactory vulnerabilities

CVEs per yearBy the year they were published

1. 20234
2. 202410
3. 20257
4. 20268

Newest CVEs

• CVE-2026-100518

  WordPress Advanced Google reCAPTCHA plugin <= 5.40 - Broken Authentication vulnerability

  WebFactory · Advanced Google reCAPTCHA

  Medium5.3
• CVE-2026-97308

  WordPress Login Lockdown plugin <= 2.17 - Bypass Vulnerability vulnerability

  WebFactory · Login Lockdown

  Medium4.8
• CVE-2026-94457

  WordPress Captcha Code plugin <= 3.32 - Bypass Vulnerability vulnerability

  WebFactory · Captcha Code

  Medium4.8
• CVE-2026-94174

  WordPress Email Log plugin <= 2.63 - SQL Injection vulnerability

  WebFactory · Email Log

  High7.6
• CVE-2026-11426

  UnderConstructionPage PRO <= 5.76 - Authenticated (Subscriber+) Arbitrary File Read via template_thumbnail Parameter

  WebFactory · Under Construction Page (Pro)

  Medium6.5
• CVE-2026-5411

  WP Captcha PRO <= 5.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload

  webfactory · Advanced Google reCAPTCHA

  High8.8
• CVE-2026-5415

  WP Captcha PRO <= 5.38 - Authenticated (Subscriber+) Authentication Bypass via Temporary Login Link

  webfactory · Advanced Google reCAPTCHA

  High8.8
• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2025-11707

  Login Lockdown & Protection <= 2.14 - IP Block Bypass

  webfactory · Login Lockdown & Protection

  Medium5.3
• CVE-2025-10645

  WP Reset <= 2.05 - Unauthenticated Sensitive Information Exposure via wf-licensing.log

  webfactory · WP Reset

  Medium5.3