Skip to content
Loopus vulnerabilities
Newest
-
loopus wp cost estimation & payment forms builder
WP Cost Estimation & Payment Forms Builder (E&P Forms) <= 10.5.97 - Unauthenticated Stored Cross-Site Scripting via 'customerInfos' Parameter
CVE-2026-9253
7.2 High
-
loopus wp cost estimation & payment forms builder
WordPress WP Cost Estimation & Payment Forms Builder plugin < 10.3.0 - Broken Access Control vulnerability
CVE-2026-24363
7.5 High
-
loopus wp attractive donations system - easy stripe & paypal donations
WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - SQL Injection vulnerability
CVE-2026-28115
9.3 Critical
-
loopus wp virtual assistant
WordPress WP Virtual Assistant plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-22725
7.1 High
-
loopus wp attractive donations system - easy stripe & paypal donations
WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - Arbitrary Content Deletion vulnerability
CVE-2025-22715
7.5 High
-
loopus wp cost estimation & payment forms builder
WP Cost Estimation <= 9.642 - Missing Authorization to Arbitrary File Upload/Delete
CVE-2019-25296
9.8 Critical
-
loopus wp cost estimation & payment forms builder
WP Cost Estimation < 9.660 - Upload Directory Traversal
CVE-2019-25295
6.5 Medium
-
loopus wp attractive donations system - easy stripe & paypal donations
WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-58999
4.3 Medium
-
loopus wp virtual assistant
WordPress WP Virtual Assistant Plugin <= 3.0 - Broken Access Control Vulnerability
CVE-2025-60155
5.3 Medium
-
loopus wp attractive donations system
WordPress WP Attractive Donations System Plugin < 1.29 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-58956
7.1 High
-
loopus wp ultimate tours builder
WordPress WP Ultimate Tours Builder plugin <= 1.055 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-31921
4.3 Medium
-
loopus wp visitors tracker
WordPress WP Visitors Tracker plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-35737
7.1 High
-
loopus wp cost estimation & payment forms builder
WordPress WP Cost Estimation & Payment Forms Builder plugin <= 10.1.75 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-32510
7.1 High
-
loopus wp cost estimation & payment forms builder
WordPress WP Cost Estimation & Payment Forms Builder plugin <= 10.1.76 - Broken Access Control vulnerability
CVE-2024-32509
6.5 Medium
-
loopus wp cost estimation & payment forms builder
WordPress WP Cost Estimation & Payment Forms Builder plugin <= 10.1.75 - SQL Injection vulnerability
CVE-2024-30489
8.5 High