wphocus vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20258
3. 20264

Newest CVEs

• CVE-2026-116855

  WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability

  wphocus · My auctions allegro

  Medium5.4
• CVE-2026-22491

  WordPress My auctions allegro plugin <= 3.6.35 - Cross Site Scripting (XSS) vulnerability

  wphocus · My auctions allegro

  High7.1
• CVE-2026-22464

  WordPress My auctions allegro plugin <= 3.6.33 - Local File Inclusion vulnerability

  wphocus · My auctions allegro

  High7.5
• CVE-2025-67943

  WordPress My auctions allegro plugin <= 3.6.32 - Cross Site Scripting (XSS) vulnerability

  wphocus · My auctions allegro

  High7.1
• CVE-2025-68567

  WordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerability

  wphocus · My auctions allegro

  Medium5.4
• CVE-2025-68566

  WordPress My auctions allegro plugin <= 3.6.35 - Cross Site Scripting (XSS) vulnerability

  wphocus · My auctions allegro

  Medium5.9
• CVE-2025-12851

  My auctions allegro <= 3.6.32 - Unauthenticated Local File Inclusion via controller

  wphocus · My auctions allegro

  High8.1
• CVE-2025-12850

  My auctions allegro <= 3.6.32 - Unauthenticated SQL Injection via auction_id

  wphocus · My auctions allegro

  High7.5
• CVE-2025-10048

  My Auctions Allegro Plugin <= 3.6.31 - Authenticated (Admin+) SQL Injection

  wphocus · My auctions allegro

  Medium4.9
• CVE-2025-27009

  WordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerability

  wphocus · My auctions allegro

  High7.1