Web-dorado vulnerabilities

Products

• Spider Video Player 3
• Wp Form Builder 3
• Contact Form Maker 2
• Contact Form Maker 2
• Event Calendar Wd 2
• Form Maker 2
• Spidervplayer 2
• Wd Instagram Feed 2
• Wdsocialwidgets 2

Newest

• web-dorado contact form maker Contact Form by WD 1.13.1 CSRF to Local File Inclusion CVE-2019-25734 5.1 MediumJune 4, 2026
• web-dorado contact form maker WordPress Contact Form Maker Plugin 1.12.20 SQL Injection CVE-2018-25347 7.1 HighMay 23, 2026
• fluentforms contact form, web-dorado wp form builder, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +2 more Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-6520 4.4 MediumJuly 27, 2024
• unknown contact form by wd, web-dorado contact form maker +1 more Contact Form by WD <= 1.13.23 - Admin+ SQLi CVE-2023-2655 7.2 HighJanuary 16, 2024
• web-dorado spidervplayer WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS) CVE-2023-48320 5.9 MediumNovember 30, 2023
• 10web wdcontactformbuilder, web-dorado wp form builder +1 more WDContactFormBuilder <= 1.0.72 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-5048 6.4 MediumNovember 22, 2023
• web-dorado wdsocialwidgets WordPress Spider Facebook Plugin <= 1.0.15 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-46619 5.4 MediumNovember 13, 2023
• 10web wd widgettwitter WD WidgetTwitter <= 1.0.9 - Authenticated (Contributor+) SQL Injection via Shortcode CVE-2023-5709 8.8 HighNovember 7, 2023
• web-dorado wdsocialwidgets WordPress Spider Facebook Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS) CVE-2023-46090 7.1 HighOctober 26, 2023
• web-dorado spidervplayer WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS) CVE-2023-45632 7.1 HighOctober 18, 2023
• unknown spidercatalog SpiderCatalog <= 1.7.3 - Admin+ SQL Injection CVE-2021-24625 7.2 HighNovember 8, 2021
• unknown backup by 10web – backup and restore plugin, web-dorado backup-wd +1 more Backup by 10Web <= 1.0.20 - Reflected Cross-Site Scripting (XSS) CVE-2021-24426 4.8 MediumJuly 12, 2021
• web-dorado contact form The WebDorado Contact Form plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin... CVE-2019-11591 8.8 HighApril 29, 2019
• web-dorado wp form builder The WebDorado Contact Form Builder plugin before 1.0.69 for WordPress allows CSRF via the wp... CVE-2019-11557 8.8 HighApril 26, 2019
• web-dorado event calendar wd version, event calendar wd +1 more Cross-site scripting vulnerability in Event Calendar WD version 1.1.21 and earlier allows remote... CVE-2018-16164 5.4 MediumJanuary 9, 2019
• web-dorado form maker The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection. CVE-2018-10504 Public exploit 7.8 HighApril 27, 2018
• web-dorado wd instagram feed Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1... CVE-2018-10301 6.1 MediumApril 23, 2018
• web-dorado wd instagram feed Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1... CVE-2018-10300 6.1 MediumApril 23, 2018
• web-dorado form maker SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to... CVE-2018-5991 Public exploit 9.8 CriticalFebruary 17, 2018
• web-dorado gallery wd SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tag_id parameter or... CVE-2018-5981 Public exploit 9.8 CriticalFebruary 17, 2018
• web-dorado contact form maker SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers... CVE-2015-2798 Public exploit 9.8 CriticalJuly 25, 2017
• web-dorado event calendar wd Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote... CVE-2017-2224 6.1 MediumJuly 7, 2017
• web-dorado spider event calendar SQL injection in the Spider Event Calendar (aka spider-event-calendar) plugin before 1.5.52 for... CVE-2017-7719 9.8 CriticalApril 12, 2017
• web-dorado spider video player Cross-site request forgery (CSRF) vulnerability in the Spider Video Player module for Drupal... CVE-2015-4352 5.8 MediumJune 15, 2015
• web-dorado spider video player The Spider Video Player module for Drupal allows remote authenticated users with the "access... CVE-2015-4351 4.9 MediumJune 15, 2015
• web-dorado spider catalog Multiple cross-site request forgery (CSRF) vulnerabilities in the Spider Catalog module for... CVE-2015-4350 6.8 MediumJune 15, 2015
• web-dorado ecommerce wd Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component... CVE-2015-2562 Public exploit EPSS 37.8% 7.5 HighMarch 20, 2015
• web-dorado spider calendar SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers... CVE-2015-2196 Public exploit EPSS 10.9% 7.5 HighMarch 3, 2015
• web-dorado spider facebook Multiple cross-site scripting (XSS) vulnerabilities in the Spider Facebook plugin before 1.0.11... CVE-2015-1582 4.3 MediumFebruary 11, 2015
• web-dorado spider video player Cross-site scripting (XSS) vulnerability in the Web Dorado Spider Video Player (aka WordPress... CVE-2014-8584 4.3 MediumNovember 4, 2014