Skip to content
Umarbajwa vulnerabilities
Newest
-
pluginops mailchimp subscribe form, optin builder, popup builder, form builder
MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder <= 4.3.3 - Unauthenticated Stored Cross-Site Scripting via Form Field Values
CVE-2026-15052
7.2 High
-
umarbajwa landing page builder – coming soon page, maintenance mode, lead page, wordpress landing pages
Landing Page Builder <= 1.5.3.6 - Cross-Site Request Forgery to ulpb_admin_data AJAX Action
CVE-2026-12409
4.3 Medium
-
umarbajwa notification bar
Notification Bar <= 2.2 - Cross-Site Request Forgery
CVE-2025-9895
4.3 Medium
-
umarbajwa social feed | all social media in one place, web-settler social feed \| all social media in one place +1 more
WordPress Social Feed | All social media in one place Plugin <= 1.5.4.6 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-47227
5.9 Medium
-
web-settler social feed, umarbajwa social feed | all social media in one place +1 more
Social Feed <= 1.5.4.6 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode
CVE-2023-5661
6.4 Medium