Skip to content
Josevega vulnerabilities
Newest
-
jose vega woocommerce bulk edit products – wp sheet editor
WordPress WooCommerce Bulk Edit Products – WP Sheet Editor plugin <= 1.8.21 - Broken Access Control vulnerability
CVE-2026-61952
4.9 Medium
-
100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 more
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
CVE-2024-13362
6.1 Medium
-
jose vega display custom fields in the frontend – post and user profile fields
WordPress Shortcode to display post and user data plugin <= 1.2.0 - Broken Access Control vulnerability
CVE-2023-31073
4.3 Medium
-
5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more
Freemius SDK <= 2.4.2 - Missing Authorization Checks
CVE-2022-4974
6.3 Medium
-
josevega display custom fields in the frontend – post and user profile fields, vegacorp display custom fields in the frontend - post and user profile fields +1 more
Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Authenticated (Contributor+) Code Injection
CVE-2023-6996
8.8 High
-
josevega display custom fields in the frontend – post and user profile fields, vegacorp display custom fields in the frontend - post and user profile fields +1 more
Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via vg_display_data
CVE-2023-6982
6.4 Medium
-
josevega display custom fields in the frontend – post and user profile fields, display custom fields in the frontend - post and user profile fields +1 more
Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Meta Disclosure
CVE-2023-6983
4.3 Medium