Skip to content

Webfactoryltd vulnerabilities

Products

Newest

webfactory advanced google recaptcha Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA Bypass CVE-2025-1262 5.3 MediumFebruary 25, 2025
webfactory minimal coming soon – coming soon page, webfactoryltd minimal coming soon \& maintenance mode +1 more Minimal Coming Soon – Coming Soon Page <= 2.38 - Missing Authorization to Limited Settings Change CVE-2024-5087 6.3 MediumJune 8, 2024
webfactory wp reset WP Reset <= 2.02 - Missing Authorization to License Key Modification CVE-2024-4661 4.3 MediumJune 8, 2024
webfactory wp force ssl & https ssl redirect, webfactoryltd wp force ssl +1 more WP Force SSL & HTTPS SSL Redirect <= 1.66 - Missing Authorization to Settings Update CVE-2024-5770 4.2 MediumJune 8, 2024
webfactory wp reset WP Reset <= 2.0 - Sensitive Information Exposure due to Insufficient Randomness CVE-2023-6799 5.9 MediumApril 9, 2024
webfactory database reset, webfactoryltd wp database reset +1 more Database Reset <= 3.22 - Cross-Site Request Forgery to WP Reset Plugin Installation CVE-2024-1501 4.7 MediumFebruary 21, 2024
webfactory login lockdown & protection, webfactoryltd wp login lockdown +1 more Login Lockdown – Protect Login Form <= 2.08 - Missing Authorization CVE-2024-1340 5.4 MediumFebruary 20, 2024
webfactory minimal coming soon – coming soon page, webfactoryltd minimal coming soon \& maintenance mode +1 more Minimal Coming Soon – Coming Soon Page <= 2.37 - Unauthenticated Maintenance Mode Bypass CVE-2024-1075 3.7 LowFebruary 5, 2024
webfactory login lockdown – protect login form, webfactoryltd wp login lockdown +1 more WordPress Login Lockdown Plugin <= 2.06 is vulnerable to SQL Injection CVE-2023-50837 7.6 HighDecember 29, 2023
webfactory ltd guest author WordPress Guest Author Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS) CVE-2023-49747 5.9 MediumDecember 15, 2023
unknown simple author box Simple Author Box < 2.52 - Contributor+ Arbitrary User Information Disclosure via IDOR CVE-2023-3601 4.3 MediumAugust 14, 2023
webfactory under construction Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_install_weglot CVE-2023-0832 4.3 MediumJune 9, 2023
webfactory under construction Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_ucp_dismiss_notice CVE-2023-0831 4.3 MediumJune 9, 2023
webfactory maps widget for google maps Maps Widget for Google Maps <= 4.24 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-1913 4.4 MediumApril 6, 2023
unknown external links in new window / new tab, webfactoryltd external links in new window \/ new tab +1 more External Links in New Window / New Tab < 1.43 - Tabnabbing CVE-2022-1583 6.5 MediumMay 30, 2022
unknown external links in new window / new tab, webfactoryltd external links in new window \/ new tab +1 more External Links in New Window / New Tab < 1.43 - Unauthenticated Stored Cross-Site Scripting CVE-2022-1582 6.1 MediumMay 30, 2022
webfactory ltd. wp reset pro WordPress WP Reset PRO Premium plugin <= 5.98 - Authenticated Database Reset vulnerability CVE-2021-36909 8.8 HighNovember 18, 2021
webfactory ltd. wp reset pro WordPress WP Reset PRO Premium Plugin <= 5.98 - Cross-Site Request Forgery (CSRF) vulnerability CVE-2021-36908 8.8 HighNovember 18, 2021
unknown maintenance Maintenance < 4.03 - Authenticated Stored XSS CVE-2021-24533 4.8 MediumAugust 23, 2021
unknown wp reset – most advanced wordpress reset tool, webfactoryltd wp reset +1 more WP Reset < 1.90 - Authenticated Stored XSS CVE-2021-24424 5.4 MediumJuly 12, 2021
unknown 301 redirects - easy redirect manager, webfactoryltd 301 redirects +1 more 301 Redirects - Easy Redirect Manager < 2.51 - Authenticated SQL Injection CVE-2021-24142 7.2 HighMarch 18, 2021
webfactoryltd wp database reset The WordPress plugin, WP Database Reset through 3.1, contains a flaw that gave any authenticated... CVE-2020-7047 9.9 CriticalJanuary 16, 2020
webfactoryltd wp database reset The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any... CVE-2020-7048 Public exploit EPSS 22.9% 9.1 CriticalJanuary 16, 2020
webfactoryltd minimal coming soon \& maintenance mode A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows... CVE-2020-6168 7.6 HighJanuary 9, 2020
webfactoryltd minimal coming soon \& maintenance mode A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.15, allows... CVE-2020-6166 5.4 MediumJanuary 9, 2020
webfactoryltd minimal coming soon \& maintenance mode A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a... CVE-2020-6167 9.6 CriticalJanuary 9, 2020
webfactoryltd 301 redirects The "301 Redirects - Easy Redirect Manager" plugin before 2.45 for WordPress allows users (with... CVE-2019-19915 9.0 CriticalDecember 19, 2019