Skip to contentWedevs vulnerabilities
Products
- Happy Addons For Elementor48
- Wp Project Manager17
- Wp User Frontend17
- Wp Erp16
- Project Manager – Ai Powered Project Management, Task Management, Kanban Board & Time Tracker12
- Wp Erp11
- Happy Addons For Elementor9
- Wp Project Manager9
- Erp: Complete Hr, Accounting & Crm Suite With Woocommerce Crm Support8
- Dokan Pro7
- Wedocs: Ai Powered Knowledge Base, Docs, Documentation, Wiki & Ai Chatbot7
- Erp: Complete Hr, Accounting & Crm Suite Built For Woocommerce6
- Wemail6
- User Frontend: Ai Powered Frontend Posting, User Directory, Profile, Membership & User Registration5
- Subscribe2 – Form, Email Subscribers & Newsletters4
- Wedocs4
- Wp User Frontend4
- Dokan3
- Storegrowth – Upsell, Bogo, Quick View, Direct Checkout & Side Cart For Woocommerce3
- Wemail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins For Woocommerce3
- Woocommerce Conversion Tracking3
- Wp User Frontend Pro3
- Appsero Helper2
- Dokan – Best Woocommerce Multivendor Marketplace Solution – Build Your Own Amazon, Ebay, Etsy2
- Recaptcha Integration For Wordpress2
- Subscribe22
- Woocommerce Conversion Tracking2
Newest
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 moreWP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File UploadCVE-2025-31006.4 Medium
- wedevs wp project managerWordPress WP Project Manager plugin < 2.6.25 - Cross Site Request Forgery (CSRF) VulnerabilityCVE-2025-322804.3 Medium
- wedevs wp project managerWordPress WP Project Manager plugin <= 2.6.22 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-226495.9 Medium
- wedevs wp erpWordPress WP ERP plugin <= 1.13.4 - Broken Access Control vulnerabilityCVE-2025-308965.4 Medium
- happymonster happy addons for elementorWordPress Happy Addons for Elementor plugin <= 3.16.2 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-307666.5 Medium
- wedevs appsero helperAppsero Helper <= 1.3.2 - Cross-Site Request Forgery to Stored Cross-Site ScriptingCVE-2024-134366.1 Medium
- wedevs subscribe2 – form, email subscribers & newslettersSubscribe2 – Form, Email Subscribers & Newsletters <= 10.43 - Unauthenticated Stored Cross-Site Scripting via IP ParameterCVE-2024-115827.2 High
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 moreWP Project Manager <= 2.6.17 - Authenticated (Subscriber+) SQL Injection via orderby ParameterCVE-2024-135006.5 Medium
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 moreWP Project Manager <= 2.6.17 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options UpdateCVE-2024-137526.5 Medium
- thehappymonster happy addons for elementorHappy Addons for Elementor <= 3.15.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-128526.4 Medium
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 moreWP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.16 - Authenticated (Subscriber+) SQL InjectionCVE-2024-121956.5 Medium
- wedevs wp erpWordPress WP ERP plugin <= 1.12.6 - Broken Access Control vulnerabilityCVE-2023-457654.3 Medium
- wedevs wp user frontendWordPress WP User Frontend plugin <= 3.6.8 - Broken Access Control vulnerabilityCVE-2023-450024.3 Medium
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 moreWP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST APICVE-2024-105486.5 Medium
- wedevs wp project managerWordPress WP Project Manager plugin <= 2.6.7 - Broken Access Control vulnerabilityCVE-2023-400036.5 Medium
- wedevs wp project managerSQL Injection in WordPress Project Manager PluginCVE-2024-120157.7 High
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker, wp project manager task team and project management plugin featuring kanban board and gantt charts +2 moreWP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/DeletionCVE-2024-105205.3 Medium
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 moreWP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.13 - Insecure Direct Object Reference to Unauthenticated Authorization BypassCVE-2024-101747.3 High
- leevio happy addons for elementorHappy Addons for Elementor <= 3.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image ComparisonCVE-2024-105386.4 Medium
- wedevs recaptcha integration for wordpress, recaptcha integration +1 moreReCaptcha Integration for WordPress <= 1.2.5 - Reflected Cross-Site ScriptingCVE-2024-87396.1 Medium
- happymonster happy addons for elementorWordPress Happy Elementor Addons plugin <= 3.12.3 - Broken Access Control vulnerabilityCVE-2024-480454.3 Medium
- wedevs wp erpWordPress WP ERP plugin <= 1.13.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-476407.1 High
- happymonster happy addons for elementorWordPress Happy Addons for Elementor plugin <= 3.12.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-473576.5 Medium
- thehappymonster happy addons for elementorHappy Addons for Elementor <= 3.12.2 - Authenticated (Contributor+) Sensitive Information ExposureCVE-2024-88014.3 Medium
- wedevs wp user frontendWordPress WP User Frontend plugin <= 4.0.7 - SQL Injection vulnerabilityCVE-2024-386937.6 High
- wedevs wemailWordPress weMail plugin <= 1.14.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-432387.1 High
- leevio happy addons for elementorHappy Addons for Elementor <= 3.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View WidgetCVE-2024-66276.4 Medium
- wedevs recaptcha integration for wordpressWordPress ReCaptcha Integration for WordPress plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-379465.9 Medium
- wedevs wp erp, erp: complete hr, accounting & crm suite with woocommerce crm support +1 moreWP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection via vendor_idCVE-2024-66668.8 High
- thehappymonster happy addons for elementorHappy Addons for Elementor <= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading WidgetCVE-2024-57906.4 Medium
- dokan, dokan pro, wedevs dokan pro +2 moreDokan Pro <= 3.10.3 - Unauthenticated SQL InjectionCVE-2024-3922Public exploitEPSS 52.9%10.0 Critical
- wedevs wemailWordPress weMail plugin <= 1.14.2 - Broken Access Control vulnerabilityCVE-2024-348225.3 Medium
- wedevs wedocsWordPress weDocs plugin <= 2.1.4 - Broken Access Control vulnerabilityCVE-2024-344425.3 Medium
- wedevs woocommerce conversion trackingWordPress WooCommerce Conversion Tracking plugin <= 2.0.11 - Broken Access Control vulnerabilityCVE-2023-522174.3 Medium
- leevio happy addons for elementorHappy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image AccordionCVE-2024-50416.4 Medium
- leevio happy addons for elementorHappy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation WidgetCVE-2024-53476.4 Medium
- leevio happy addons for elementorHappy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-50886.4 Medium
- leevio happy addons for elementorHappy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id ParameterCVE-2024-48656.4 Medium
- wedevs wp user frontendWordPress WP User Frontend plugin <= 3.6.5 - Authenticated Privilege Escalation vulnerabilityCVE-2023-476827.2 High
- leevio happy addons for elementorHappy Addons for Elementor Authenticated (Contributor+) Stored-XSS <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar WidgetCVE-2024-43916.4 Medium
- leevio happy addons for elementorHappy Addons for Elementor <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group WidgetCVE-2024-44786.4 Medium
- happymonster happy addons for elementorWordPress Happy Addons for Elementor plugin <= 3.10.1 - Broken Access Control on Post Clone vulnerabilityCVE-2024-248334.3 Medium
- leevio happy addons for elementorHappy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML TagsCVE-2024-38916.4 Medium
- wedevs wp erp, erp: complete hr, accounting & crm suite with woocommerce crm support, woocommerce crm \& accounting +2 moreWP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (AccountingManager+) SQL InjectionCVE-2024-11737.2 High
- leevio happy addons for elementorHappy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group, Photo Stack, & Horizontal TimelineCVE-2024-37246.4 Medium
- leevio happy addons for elementorHappy Addons for Elementor <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendly WidgetCVE-2024-38906.4 Medium
- happymonster happy addons for elementorWordPress Happy Addons for Elementor plugin <= 3.10.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-326986.5 Medium
- leevio happy addons for elementorHappy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Stack WidgetCVE-2024-14986.4 Medium
- wedevs wp erp, erp: complete hr, accounting & crm suite with woocommerce crm support +1 moreWP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection via idCVE-2024-09527.2 High
- leevio happy addons for elementorHappy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title HTML TagCVE-2024-27876.4 Medium
- Show moreLoading…