wpdever vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20254
3. 20261

Newest CVEs

• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2025-58821

  WordPress WP Notification Bell plugin <= 1.4.6 - Cross Site Scripting (XSS) vulnerability

  wpdever · WP Notification Bell

  Medium5.9
• CVE-2025-47538

  WordPress Cart tracking for WooCommerce plugin <= 1.0.17 - SQL Injection Vulnerability

  wpdever · Cart tracking for WooCommerce

  High7.6
• CVE-2025-30791

  WordPress Cart tracking for WooCommerce plugin <= 1.0.16 - SQL Injection Vulnerability

  wpdever · Cart tracking for WooCommerce

  High7.6
• CVE-2025-22357

  WordPress Target Notifications plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

  wpdever · Target Notifications

  High7.1
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3