Skip to contentSaad Iqbal vulnerabilities
Newest
- saad iqbal mycredWordPress myCred plugin <= 2.9.7.3 - Broken Access Control vulnerabilityCVE-2026-249514.3 Medium
- saad iqbal new user approveNew User Approve <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary User Approval, Denial, and Information DisclosureCVE-2026-08327.3 High
- saad iqbal appexpertsWordPress AppExperts plugin <= 1.4.5 - SQL Injection vulnerabilityCVE-2025-688818.5 High
- saad iqbal quick contact formQuick Contact Form <= 8.2.6 - Unauthenticated Open Mail RelayCVE-2025-127185.8 Medium
- saad iqbal post snippetsWordPress Post Snippets plugin <= 4.0.11 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-630404.3 Medium
- saad iqbal user avatar - reloadedWordPress User Avatar - Reloaded plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-680806.5 Medium
- saad iqbal new user approveWordPress New User Approve plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-630307.1 High
- saad iqbal post smtpWordPress Post SMTP plugin <= 3.6.1 - Broken Access Control vulnerabilityCVE-2025-675635.3 Medium
- saad iqbal quick contact formWordPress Quick Contact Form plugin <= 8.2.5 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-674714.3 Medium
- saad iqbal new user approveNew User Approve <= 3.0.9 - Unauthenticated Sensitive Information Disclosure via Type JugglingCVE-2025-127705.3 Medium
- saad iqbal all in one loginWordPress All In One Login plugin <= 2.0.8 - Bypass Vulnerability vulnerabilityCVE-2025-585955.3 Medium
- saad iqbal appexpertsWordPress AppExperts plugin <= 1.4.5 - Sensitive Data Exposure vulnerabilityCVE-2025-532185.8 Medium
- saad iqbal license manager for woocommerceWordPress License Manager for WooCommerce Plugin <= 3.0.12 - SQL Injection VulnerabilityCVE-2025-58788Public exploit7.6 High
- saad iqbal bookifyWordPress Bookify <= 1.0.9 - Privilege Escalation VulnerabilityCVE-2025-481428.8 High
- saad iqbal mycredWordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-546686.5 Medium
- saad iqbal mycredWordPress myCred plugin <= 2.9.4.3 - Race Condition VulnerabilityCVE-2025-546675.3 Medium
- saad iqbal post smtpWordPress Post SMTP plugin <= 3.2.0 - Account Takeover VulnerabilityCVE-2025-24000Public exploit8.8 High
- saad iqbal mycredWordPress myCred plugin <= 2.9.4.2 - Broken Access Control VulnerabilityCVE-2025-498574.3 Medium
- saad iqbal mycredWordPress myCred plugin <= 2.9.4.2 - Broken Access Control VulnerabilityCVE-2025-498725.3 Medium
- saad iqbal quick contact formWordPress Quick Contact Form plugin <= 8.2.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-482457.1 High
- advancedfilemanager advanced file managerWordPress Advanced File Manager plugin <= 5.3.1 - Broken Access Control to Notice Dismissal vulnerabilityCVE-2025-476885.3 Medium
- saad iqbal license manager for woocommerceWordPress License Manager for WooCommerce plugin <= 3.0.9 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-325227.1 High
- expresstech systems gutena kit – gutenberg blocks and templatesWordPress Gutena Kit plugin <= 2.0.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-318056.5 Medium
- saad iqbal appexpertsWordPress AppExperts plugin <= 1.4.3 - Sensitive Data Exposure VulnerabilityCVE-2025-306095.3 Medium
- saad iqbal user managementWordPress User Management plugin <= 1.2 - Privilege Escalation vulnerabilityCVE-2025-227368.8 High
- saad iqbal post smtpWordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerabilityCVE-2025-228004.3 Medium
- saad iqbal new user approveWordPress New User Approve plugin <= 2.6.2 - Broken Access Control vulnerabilityCVE-2024-543235.4 Medium
- saad iqbal apiexperts square for woocommerceWordPress APIExperts Square for WooCommerce plugin <= 4.4.1 - Broken Access ControlCVE-2022-471825.3 Medium
- fullworks quick contact formWordPress Quick Contact Form plugin <= 8.0.3.1 - Broken Access Control vulnerabilityCVE-2023-250356.5 Medium
- saad iqbal post smtpWordPress Post SMTP plugin <= 2.9.9 - SQL Injection vulnerabilityCVE-2024-524367.6 High
- saad iqbal user managementWordPress User Management plugin <= 1.1 - Arbitrary File Upload vulnerabilityCVE-2024-524039.9 Critical
- mycred elementor, saad iqbal mycred elementor +1 moreWordPress myCred Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-497026.5 Medium
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- saad iqbal wpexperts square for givewpWordPress WPExperts Square For GiveWP plugin <= 1.3 - SQL Injection vulnerabilityCVE-2024-473388.5 High
- mycredWordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerabilityCVE-2024-432145.3 Medium
- mycredWordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerabilityCVE-2024-433549.8 Critical
- saad iqbal mycredWordPress myCred plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-433536.5 Medium
- saad iqbal license manager for woocommerceLicense Manager for WooCommerce <= 3.0.6 - Improper Authorization to Authenticated(Contributor+) Sensitive Information ExposureCVE-2024-16396.5 Medium
- saad iqbal mycredWordPress myCred plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-327116.5 Medium
- post smtp smtp, saad iqbal post smtp +1 moreWordPress POST SMTP Mailer plugin <= 2.8.6 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-291287.1 High
- saad iqbal post smtpPost SMTP < 2.8.7 - Reflected Cross-Site ScriptingCVE-2023-66216.1 Medium
- saad iqbal new user approveWordPress New User Approve Plugin <= 2.5.1 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-509024.3 Medium
- licensemanager license manager for woocommerceWordPress License Manager for WooCommerce Plugin <= 2.2.10 is vulnerable to SQL InjectionCVE-2023-487427.6 High
- advancedfilemanager advanced file managerAdvanced File Manager < 5.1.1 - Admin+ Arbitrary File/Folder AccessCVE-2023-38144.9 Medium
- saad iqbal wp easypayWP EasyPay < 4.1 - Reflected Cross-Site ScriptingCVE-2023-14656.1 Medium
- postsnippets post snippetsWordPress Post Snippets Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)CVE-2023-254595.9 Medium
- mycredWordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-350965.4 Medium
- fullworks quick contact formWordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)CVE-2022-476085.9 Medium
- fullworks quick contact formWordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)CVE-2023-238856.5 Medium
- saad iqbal new user approveNew User Approve < 2.4 - Arbitrary Settings Update & Invitation Code Creation via CSRFCVE-2022-16254.3 Medium
- Show moreLoading…