Skip to content

Webfactory vulnerabilities

Products

Newest

webfactory advanced google recaptcha WordPress Advanced Google reCAPTCHA plugin <= 5.40 - Broken Authentication vulnerability CVE-2026-100518 5.3 MediumOctober 6, 2026
webfactory login lockdown WordPress Login Lockdown plugin <= 2.17 - Bypass Vulnerability vulnerability CVE-2026-97308 4.8 MediumOctober 6, 2026
webfactory captcha code WordPress Captcha Code plugin <= 3.32 - Bypass Vulnerability vulnerability CVE-2026-94457 4.8 MediumSeptember 23, 2026
sudar email log WordPress Email Log plugin <= 2.63 - SQL Injection vulnerability CVE-2026-94174 7.6 HighSeptember 23, 2026
underconstructionpage under construction WordPress Under Construction plugin <= 5.82 - Cross Site Scripting (XSS) vulnerability CVE-2026-81295 7.1 HighSeptember 3, 2026
webfactory under construction page (pro) UnderConstructionPage PRO <= 5.76 - Authenticated (Subscriber+) Arbitrary File Read via template_thumbnail Parameter CVE-2026-11426 6.5 MediumJuly 11, 2026
webfactory advanced google recaptcha WP Captcha PRO <= 5.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload CVE-2026-5411 Public exploit 8.8 HighJune 5, 2026
webfactory advanced google recaptcha WP Captcha PRO <= 5.38 - Authenticated (Subscriber+) Authentication Bypass via Temporary Login Link CVE-2026-5415 Public exploit 8.8 HighJune 5, 2026
100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 more Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter CVE-2024-13362 6.1 MediumMay 1, 2026
webfactory login lockdown & protection Login Lockdown & Protection <= 2.14 - IP Block Bypass CVE-2025-11707 5.3 MediumDecember 13, 2025
webfactory wp reset WP Reset <= 2.05 - Unauthenticated Sensitive Information Exposure via wf-licensing.log CVE-2025-10645 5.3 MediumOctober 7, 2025
webfactory aibud wp WordPress AiBud WP plugin <= 1.9 - Arbitrary File Upload vulnerability CVE-2025-23968 Public exploit 9.1 CriticalJuly 3, 2025
webfactory login lockdown & protection Login Lockdown & Protection <= 2.11 - Missing Authorization to Authenticated (Subscriber+) Arbitrary IP Whitelisting CVE-2025-3766 5.4 MediumMay 7, 2025
webfactory advanced google recaptcha Advanced Google reCAPTCHA <= 1.29 - Authenticated (Subscriber+) Limited SQL Injection via 'sSearch' Parameter CVE-2025-2074 5.3 MediumMarch 28, 2025
webfactory advanced google recaptcha Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA Bypass CVE-2025-1262 5.3 MediumFebruary 25, 2025
webfactory order export for woocommerce Order Export for WooCommerce <= 3.24 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory CVE-2024-13623 5.9 MediumJanuary 31, 2025
webfactory advanced google recaptcha Advanced Google reCAPTCHA <= 1.25 - Brute Force Protection IP Unblock CVE-2024-12034 5.3 MediumDecember 24, 2024
5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
jem-products order export for woocommerce, jem plugins order expert for woocommerce +1 more WordPress Order Export for WooCommerce plugin <= 3.23 - Sensitive Data Exposure vulnerability CVE-2024-43259 5.3 MediumAugust 26, 2024
webfactory minimal coming soon – coming soon page, webfactoryltd minimal coming soon \& maintenance mode +1 more Minimal Coming Soon – Coming Soon Page <= 2.38 - Missing Authorization to Limited Settings Change CVE-2024-5087 6.3 MediumJune 8, 2024
webfactory wp reset WP Reset <= 2.02 - Missing Authorization to License Key Modification CVE-2024-4661 4.3 MediumJune 8, 2024
webfactory wp force ssl & https ssl redirect, webfactoryltd wp force ssl +1 more WP Force SSL & HTTPS SSL Redirect <= 1.66 - Missing Authorization to Settings Update CVE-2024-5770 4.2 MediumJune 8, 2024
webfactory captcha code WordPress Captcha Code plugin <= 2.9 - Captcha Bypass vulnerability CVE-2023-48745 5.3 MediumJune 4, 2024
sudar email log Email Log <= 2.4.8 - Unauthenticated Hook Injection CVE-2024-0867 8.1 HighMay 24, 2024
webfactory wp reset WP Reset <= 2.0 - Sensitive Information Exposure due to Insufficient Randomness CVE-2023-6799 5.9 MediumApril 9, 2024
webfactory database reset, webfactoryltd wp database reset +1 more Database Reset <= 3.22 - Cross-Site Request Forgery to WP Reset Plugin Installation CVE-2024-1501 4.7 MediumFebruary 21, 2024
webfactory login lockdown & protection, webfactoryltd wp login lockdown +1 more Login Lockdown – Protect Login Form <= 2.08 - Missing Authorization CVE-2024-1340 5.4 MediumFebruary 20, 2024
webfactory minimal coming soon – coming soon page, webfactoryltd minimal coming soon \& maintenance mode +1 more Minimal Coming Soon – Coming Soon Page <= 2.37 - Unauthenticated Maintenance Mode Bypass CVE-2024-1075 3.7 LowFebruary 5, 2024
webfactory login lockdown – protect login form, webfactoryltd wp login lockdown +1 more WordPress Login Lockdown Plugin <= 2.06 is vulnerable to SQL Injection CVE-2023-50837 7.6 HighDecember 29, 2023
webfactory wordpress charts WordPress Charts <= 0.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-5062 6.4 MediumSeptember 20, 2023
webfactory under construction Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_install_weglot CVE-2023-0832 4.3 MediumJune 9, 2023
webfactory under construction Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_ucp_dismiss_notice CVE-2023-0831 4.3 MediumJune 9, 2023
webfactory maps widget for google maps Maps Widget for Google Maps <= 4.24 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-1913 4.4 MediumApril 6, 2023
unknown wp reset – most advanced wordpress reset tool, webfactoryltd wp reset +1 more WP Reset < 1.90 - Authenticated Stored XSS CVE-2021-24424 5.4 MediumJuly 12, 2021