Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

wedevs vulnerabilities

130 published CVEs name wedevs among the affected products.

Published CVEs
130
Last 12 months
72
Critical
4
Known exploited
0

Critical 4High 41Medium 85Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20211
  2. 20221
  3. 202311
  4. 202425
  5. 202526
  6. 202666

Newest CVEs

  • CVE-2026-121993

    wePOS before 2.0.3 Missing Authorization via payment/process Endpoint

    wedevs · wePOS – Point Of Sale (POS) for WooCommerce & Dokan

    Medium5.3
  • CVE-2026-119485

    WordPress Dokan plugin <= 5.3.2 - Broken Access Control vulnerability

    weDevs · Dokan

    Medium5.3
  • CVE-2026-119487

    WordPress Dokan plugin <= 5.3.2 - Broken Access Control vulnerability

    weDevs · Dokan

    Medium5.3
  • CVE-2026-120070

    User Frontend <= 4.3.13 - Authenticated (Subscriber+) Privilege Escalation via post_content Parameter

    wedevs · User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

    High8.8
  • CVE-2026-116512

    Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injection

    wedevs · Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker

    Critical9.8
  • CVE-2026-103962

    User Frontend <= 4.3.13 - Reflected Cross-Site Scripting via 'field_attr[required]' Parameter

    wedevs · User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

    Medium6.1
  • CVE-2026-96894

    ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.10 - Unauthenticated Stored Cross-Site Scripting via Inbound Email Body

    wedevs · ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce

    High7.2
  • CVE-2026-109891

    WordPress Happy Addons for Elementor plugin <= 3.50.1 - Broken Access Control vulnerability

    weDevs · Happy Addons for Elementor

    Medium6.4
  • CVE-2026-25448

    WordPress WP ERP plugin <= 1.17.10 - Broken Access Control vulnerability

    weDevs · WP ERP

    Medium4.3
  • CVE-2026-116850

    WordPress Happy Addons for Elementor plugin <= 3.50.1 - Cross Site Scripting (XSS) vulnerability

    weDevs · Happy Addons for Elementor

    Medium6.5