Skip to content
Redefiningtheweb vulnerabilities
Newest
-
redefiningtheweb affiliate pro - affiliate program for woocommerce & wordpress
WordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress plugin <= 8.9.1 - Privilege Escalation vulnerability
CVE-2026-32558
9.8 Critical
-
redefiningtheweb affiliate program & referral tracking for woocommerce & wordpress – affilia
Affilia <= 3.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Status Modification
CVE-2026-7559
4.3 Medium
-
redefiningtheweb wordpress contact form 7 pdf, google sheet & database
WordPress WordPress Contact Form 7 PDF, Google Sheet & Database plugin <= 3.0.0 - Arbitrary File Upload vulnerability
CVE-2025-64231
9.9 Critical
-
redefiningtheweb dynamic pricing & discounts lite for woocommerce
WordPress Dynamic Pricing & Discounts Lite for WooCommerce plugin <= 2.0.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-48342
5.4 Medium
-
redefiningtheweb bma lite
WordPress BMA Lite plugin <= 1.4.2 - SQL Injection vulnerability
CVE-2025-39518
7.6 High
-
redefiningtheweb pdf generator addon for elementor page builder
WordPress PDF Generator Addon for Elementor Page Builder plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31850
6.5 Medium
-
redefiningtheweb pdf generator addon for elementor page builder
WordPress PDF Generator Addon for Elementor Page Builder plugin <= 1.7.5 - Arbitrary File Read vulnerability
CVE-2025-24569
7.5 High
-
redefiningtheweb pdf generator addon for elementor page builder, pdf generator for wordpress elementor +1 more
PDF Generator Addon for Elementor Page Builder <= 2.0.0 - Unauthenticated Arbitrary File Download
CVE-2024-9935
Public exploit
7.5 High
-
redefiningtheweb pdf generator addon for elementor page builder
WordPress PDF Generator Addon for Elementor Page Builder plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability
CVE-2024-50449
6.5 Medium
-
redefiningtheweb affiliate pro, wordpress & woocommerce affiliate program +1 more
WordPress & WooCommerce Affiliate Program <= 8.4.1 - Authentication Bypass to Account Takeover and Privilege Escalation
CVE-2024-9289
9.8 Critical