Saad Iqbal vulnerabilities

Products

• Mycred 28
• New User Approve 11
• Apiexperts Square For Woocommerce 8
• License Manager For Woocommerce 8
• Post Smtp 8
• Wp Easypay 8
• Quick Contact Form 7
• Advanced File Manager 6
• Post Snippets 6
• All In One Login 3
• Appexperts 3
• Bookify 2
• User Management 2

Newest

• mycred WordPress myCred plugin <= 4.0.2 - Content Injection vulnerability CVE-2026-125778 4.3 MediumNovember 11, 2026
• mycred WordPress myCred plugin <= 4.0.2 - Sensitive Data Exposure vulnerability CVE-2026-123465 7.5 HighNovember 9, 2026
• mycred WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability CVE-2026-123462 5.3 MediumNovember 7, 2026
• mycred WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability CVE-2026-122668 4.3 MediumNovember 7, 2026
• mycred WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability CVE-2026-124274 5.3 MediumNovember 7, 2026
• mycred WordPress myCred plugin <= 4.0.2 - Content Injection vulnerability CVE-2026-123471 4.3 MediumNovember 6, 2026
• saad iqbal all in one login All In One Login 2.4.0 - 2.4.1 - Unauthenticated Account Takeover via Email OTP Brute Force CVE-2026-19256 9.8 CriticalNovember 5, 2026
• mycred WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability CVE-2026-97072 4.3 MediumNovember 3, 2026
• mycred WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability CVE-2026-103077 4.3 MediumNovember 3, 2026
• saad iqbal all in one login WordPress All In One Login plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-94175 7.1 HighOctober 30, 2026
• saad iqbal wp easypay WordPress WP EasyPay plugin <= 4.5.4 - Path Traversal vulnerability CVE-2026-39734 7.5 HighOctober 30, 2026
• saad iqbal apiexperts square for woocommerce WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-119466 5.4 MediumOctober 30, 2026
• mycred WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability CVE-2026-97073 5.3 MediumOctober 29, 2026
• mycred WordPress myCred plugin <= 4.0.1 - Bypass Vulnerability vulnerability CVE-2026-115962 4.3 MediumOctober 29, 2026
• saad iqbal apiexperts square for woocommerce WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability CVE-2026-115959 5.3 MediumOctober 26, 2026
• saad iqbal apiexperts square for woocommerce WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability CVE-2026-115960 4.3 MediumOctober 26, 2026
• mycred WordPress myCred plugin <= 4.0.0-beta.1 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-114698 5.4 MediumOctober 22, 2026
• saad iqbal advanced file manager Advanced File Manager 5.4.13 - 5.4.14 - Authenticated Stored XSS via SVG Sanitiser Content-Sniff Bypass CVE-2026-79627 7.1 HighOctober 21, 2026
• saad iqbal advanced file manager WordPress Advanced File Manager plugin <= 5.4.14 - Broken Access Control vulnerability CVE-2026-110365 6.5 MediumOctober 18, 2026
• saad iqbal wp easypay WordPress WP EasyPay plugin <= 4.5.4 - Broken Access Control vulnerability CVE-2026-96449 5.3 MediumOctober 15, 2026
• saad iqbal apiexperts square for woocommerce WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability CVE-2026-110367 5.3 MediumOctober 15, 2026
• saad iqbal post snippets Post Snippets <= 4.2.4 - Contributor+ Stored XSS via Snippet Variable CVE-2026-12980 6.8 MediumOctober 11, 2026
• saad iqbal new user approve New User Approve 3.1.0 - 3.2.9 - Unauthenticated PII Disclosure via Zapier API Key Bypass CVE-2026-83560 5.3 MediumSeptember 30, 2026
• saad iqbal wp easypay WordPress WP EasyPay plugin <= 4.5.3 - Bypass Vulnerability vulnerability CVE-2026-84762 5.3 MediumSeptember 3, 2026
• saad iqbal post smtp WordPress Post SMTP plugin 4.0.0-beta.1 - Settings Change vulnerability CVE-2026-81278 5.4 MediumAugust 31, 2026
• saad iqbal mycred myCred < 3.2.5 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification in buyCRED CVE-2026-15150 5.3 MediumAugust 21, 2026
• mycred new user approve WordPress New User Approve plugin <= 3.2.8 - Broken Access Control vulnerability CVE-2026-28163 5.3 MediumAugust 20, 2026
• saad iqbal advanced file manager Advanced File Manager < 5.4.13 - Authenticated Arbitrary File Read and Write via fma_load_fma_ui CVE-2026-11565 8.5 HighAugust 19, 2026
• saad iqbal license manager for woocommerce WordPress License Manager for WooCommerce plugin <= 3.0.18 - SQL Injection vulnerability CVE-2026-73345 7.1 HighAugust 18, 2026
• saad iqbal gutena forms – contact form, survey form, feedback form, booking form, and custom form builder WordPress Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin <= 1.9.0 - Broken Authentication vulnerability CVE-2026-66425 6.5 MediumAugust 6, 2026
• saad iqbal wp easypay WordPress WP EasyPay plugin <= 4.5.0 - Arbitrary Content Deletion vulnerability CVE-2026-57808 6.5 MediumJuly 23, 2026
• saad iqbal mycred WordPress myCred plugin <= 3.1.2 - Broken Access Control vulnerability CVE-2026-61968 5.4 MediumJuly 13, 2026
• saad iqbal license manager for woocommerce WordPress License Manager for WooCommerce plugin <= 3.0.17 - Arbitrary Content Deletion vulnerability CVE-2026-61958 5.4 MediumJuly 13, 2026
• saad iqbal apiexperts square for woocommerce WordPress APIExperts Square for WooCommerce plugin <= 4.7.4 - SQL Injection vulnerability CVE-2026-57810 8.5 HighJuly 13, 2026
• mndpsingh287 file manager, ninja team file manager pro, saad iqbal advanced file manager +1 more +3 more Multiple elFinder Plugins - Authenticated OS Command Injection CVE-2026-6382 9.1 CriticalJuly 6, 2026
• saad iqbal apiexperts square for woocommerce WordPress APIExperts Square for WooCommerce plugin <= 4.7.3 - Sensitive Data Exposure vulnerability CVE-2026-54848 8.3 HighJune 25, 2026
• post snippets snippets, saad iqbal post snippets +1 more WordPress Post Snippets plugin <= 4.0.19 - Remote Code Execution (RCE) vulnerability CVE-2026-56049 8.5 HighJune 25, 2026
• mycred license manager for woocommerce WordPress License Manager for WooCommerce plugin <= 3.0.15 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-56013 6.5 MediumJune 25, 2026
• saad iqbal wp easypay WordPress WP EasyPay plugin <= 4.5.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-56024 6.5 MediumJune 18, 2026
• saad iqbal post smtp WordPress Post SMTP plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-48838 7.1 HighJune 15, 2026
• mycred WordPress myCred plugin <= 3.0.3 - Broken Access Control vulnerability CVE-2026-40794 6.5 MediumJune 15, 2026
• mycred bookify WordPress Bookify plugin <= 1.1.1 - Broken Access Control vulnerability CVE-2025-69332 6.5 MediumJune 15, 2026
• mycred WordPress myCred plugin <= 3.0.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-42676 6.5 MediumJune 1, 2026
• saad iqbal wp easypay WordPress WP EasyPay plugin <= 4.3.0 - Sensitive Data Exposure vulnerability CVE-2026-45215 5.3 MediumMay 12, 2026
• saad iqbal apiexperts square for woocommerce WordPress APIExperts Square for WooCommerce plugin <= 4.7.1 - SQL Injection vulnerability CVE-2026-45211 8.5 HighMay 12, 2026
• saad iqbal new user approve WordPress New User Approve plugin <= 3.2.3 - Broken Access Control vulnerability CVE-2026-25390 6.5 MediumMarch 25, 2026
• saad iqbal post snippets WordPress Post Snippets plugin <= 4.0.12 - Remote Code Execution (RCE) vulnerability CVE-2026-25001 8.5 HighMarch 25, 2026
• saad iqbal wp easypay WordPress WP EasyPay plugin <= 4.2.11 - Broken Access Control vulnerability CVE-2026-32587 5.4 MediumMarch 16, 2026
• saad iqbal new user approve WordPress New User Approve plugin <= 3.2.0 - Broken Access Control vulnerability CVE-2025-69063 8.6 HighFebruary 20, 2026
• saad iqbal mycred WordPress myCred plugin <= 2.9.7.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-27440 6.5 MediumFebruary 19, 2026
• Show olderLoading…