Webdevstudios vulnerabilities

Products

• Custom Post Type Ui 3
• Automatic Featured Images From Videos 2

Newest

• webdevstudios automatic featured images from videos WordPress Automatic Featured Images from Videos plugin <= 1.2.7 - Broken Access Control vulnerability CVE-2026-24535 4.3 MediumJanuary 23, 2026
• webdevstudios custom post type ui Custom Post Type UI <= 1.18.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'label' Import Parameter CVE-2025-14056 4.4 MediumDecember 13, 2025
• webdevstudios custom post type ui Custom Post Type UI <= 1.18.0 - Missing Authorization to Unauthenticated (Previously Administrator+) Custom Post Type Modification CVE-2025-12826 4.8 MediumDecember 4, 2025
• webdevstudios constant contact for wordpress WordPress Constant Contact for WordPress Plugin <= 4.1.1 - PHP Object Injection Vulnerability CVE-2025-48101 8.8 HighSeptember 9, 2025
• webdevstudios automatic featured images from videos WordPress Automatic Featured Images from Videos plugin <= 1.2.4 - Broken Access Control vulnerability CVE-2025-31820 4.3 MediumApril 1, 2025
• webdevstudios wds multisite aggregate WDS Multisite Aggregate Plugin WDS_Multisite_Aggregate_Options.php update_options cross site scripting CVE-2015-10120 3.5 LowJuly 10, 2023
• unknown custom post type ui Custom Post Type UI < 1.13.5 - Debug Info Sending via CSRF CVE-2023-1623 6.5 MediumApril 24, 2023
• webdevstudios taxonomy-switcher plugin, taxonomy switcher +1 more WebDevStudios taxonomy-switcher Plugin taxonomy-switcher.php taxonomy_switcher_init cross site scripting CVE-2015-10013 3.5 LowJanuary 5, 2023
• webdevstudios ithemes paypal pro PayPal Pro Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and... CVE-2015-9373 6.1 MediumAugust 28, 2019