Skip to contentWedevs vulnerabilities
Products
- Happy Addons For Elementor48
- Wp Project Manager17
- Wp User Frontend17
- Wp Erp16
- Project Manager – Ai Powered Project Management, Task Management, Kanban Board & Time Tracker12
- Wp Erp11
- Happy Addons For Elementor9
- Wp Project Manager9
- Erp: Complete Hr, Accounting & Crm Suite With Woocommerce Crm Support8
- Dokan Pro7
- Wedocs: Ai Powered Knowledge Base, Docs, Documentation, Wiki & Ai Chatbot7
- Erp: Complete Hr, Accounting & Crm Suite Built For Woocommerce6
- Wemail6
- User Frontend: Ai Powered Frontend Posting, User Directory, Profile, Membership & User Registration5
- Subscribe2 – Form, Email Subscribers & Newsletters4
- Wedocs4
- Wp User Frontend4
- Dokan3
- Storegrowth – Upsell, Bogo, Quick View, Direct Checkout & Side Cart For Woocommerce3
- Wemail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins For Woocommerce3
- Woocommerce Conversion Tracking3
- Wp User Frontend Pro3
- Appsero Helper2
- Dokan – Best Woocommerce Multivendor Marketplace Solution – Build Your Own Amazon, Ebay, Etsy2
- Recaptcha Integration For Wordpress2
- Subscribe22
- Woocommerce Conversion Tracking2
Newest
- wedevs wedocs: ai powered knowledge base, docs, documentation, wiki & ai chatbotweDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'connectorWidth' Block AttributeCVE-2026-127346.4 Medium
- wedevs wedocs: ai powered knowledge base, docs, documentation, wiki & ai chatbotweDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Data Migration via wedocs_migrate_betterdocs_to_wedocs AJAX Ac…CVE-2026-127294.3 Medium
- dokan pro, wedevs dokan pro +1 moreDokan Pro <= 5.0.4 - Authenticated (Vendor+) Privilege Escalation via update_capabilities REST EndpointCVE-2026-122248.8 High
- wedevs wp user frontendWordPress WP User Frontend plugin <= 4.3.7 - Broken Access Control vulnerabilityCVE-2026-573346.5 Medium
- wedevs wemailWordPress weMail plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2026-573227.1 High
- dokan pro, wedevs dokan pro +1 moreDokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' ParametersCVE-2026-120777.5 High
- dokan pro, wedevs dokan pro +1 moreDokan Pro <= 5.0.4 - Authenticated (Subscriber+) SQL Injection via 'orderby' ParameterCVE-2026-120796.5 Medium
- unknown wemail: email marketing, email automation, newsletters, subscribers & email optins for woocommerceweMail < 2.1.3 - Reflected Cross-Site ScriptingCVE-2026-80897.1 High
- wedevs woocommerce conversion trackingWordPress WooCommerce Conversion Tracking plugin <= 2.0.10 - Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2022-471504.3 Medium
- wedevs user frontend: ai powered frontend posting, user directory, profile, membership & user registrationUser Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.2 - Missing Authorization to Authenticated (Subscriber+) Subscription Pack CancellationCVE-2026-40584.3 Medium
- wedevs wp erp proWP ERP Pro <= 1.5.1 - Unauthenticated SQL Injection via 'search_key' ParameterCVE-2026-48347.5 High
- wedevs user frontend: ai powered frontend posting, user directory, profile, membership & user registrationUser Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Authenticated (Subscriber+) PHP Object InjectionCVE-2026-51278.8 High
- wedevs happy addons for elementorWordPress Happy Addons for Elementor plugin <= 3.20.8 - Sensitive Data Exposure vulnerabilityCVE-2026-254685.3 Medium
- wedevs wp user frontendWordPress WP User Frontend plugin <= 4.3.1 - Broken Access Control vulnerabilityCVE-2026-424126.5 Medium
- wedevs wedocsWordPress weDocs plugin <= 2.1.18 - Broken Access Control vulnerabilityCVE-2026-395205.3 Medium
- wedevs wp user frontendWordPress WP User Frontend plugin <= 4.2.8 - Broken Access Control vulnerabilityCVE-2026-324857.5 High
- wedevs wp user frontendWordPress WP User Frontend plugin <= 4.2.5 - Broken Access Control vulnerabilityCVE-2026-243646.5 Medium
- wedevs user frontend: ai powered frontend posting, user directory, profile, membership & user registrationUser Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Post Modification via 'post_id' Parame…CVE-2026-22335.3 Medium
- wedevs wp erpWordPress WP ERP plugin <= 1.16.10 - SQL Injection vulnerabilityCVE-2026-319178.5 High
- thehappymonster happy addons for elementorHappy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Duplication via 'post_id' ParameterCVE-2026-29175.4 Medium
- thehappymonster happy addons for elementorHappy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Stored Cross-Site Scripting via Template ConditionsCVE-2026-29186.4 Medium
- wedevs user frontend: ai powered frontend posting, user directory, profile, membership & user registrationUser Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Authenticated (Author+) Arbitrary File UploadCVE-2026-15658.8 High
- wedevs wemail: email marketing, email automation, newsletters, subscribers & email optins for woocommerceweMail <= 2.0.7 - Missing Authorization to Unauthenticated Form DeletionCVE-2025-143396.5 Medium
- unknown subscribe2WordPress Subscribe2 plugin <= 10.44 - Broken Access Control vulnerabilityCVE-2026-249446.5 Medium
- thehappymonster happy addons for elementorHappy Addons for Elementor <= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta FieldCVE-2026-1210Public exploit6.4 Medium
- wedevs wedocs: ai powered knowledge base, docs, documentation, wiki & ai chatbotweDocs <= 2.1.16 - Missing Authorization to Authenticated (Subscriber+) Documentation Post UpdateCVE-2025-139214.3 Medium
- happymonster happy addons for elementorWordPress Happy Addons for Elementor plugin <= 3.20.4 - SQL Injection vulnerabilityCVE-2025-68999Public exploit8.5 High
- wedevs wemail: email marketing, email automation, newsletters, subscribers & email optins for woocommerceweMail <= 2.0.7 - Insufficient Authorization via x-wemail-user Header to Sensitive Information DisclosureCVE-2025-143485.3 Medium
- wedevs wedocs: ai powered knowledge base, docs, documentation, wiki & ai chatbotweDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.1.15 - Unauthenticated Sensitive Information ExposureCVE-2025-145745.3 Medium
- wedevs user frontend: ai powered frontend posting, user directory, profile, membership & user registrationWP User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Arbitrary Attachment DeletionCVE-2025-140475.3 Medium
- wedevs wp project managerWordPress WP Project Manager plugin <= 3.0.1 - Sensitive Data Exposure vulnerabilityCVE-2025-680406.5 Medium
- thehappymonster happy addons for elementorHappy Addons for Elementor <= 3.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JSCVE-2025-146356.4 Medium
- wedevs wp erpWordPress WP ERP plugin <= 1.16.6 - Sensitive Data Exposure vulnerabilityCVE-2025-675466.5 Medium
- dokan pro, wedevs dokan pro +1 moredokan pro <= 4.1.3 - Missing Authorization to Unauthenticated Sensitive Information ExposureCVE-2025-128095.3 Medium
- happymonster happy addons for elementorWordPress Happy Addons for Elementor plugin <= 3.20.3 - Broken Access Control vulnerabilityCVE-2025-630774.3 Medium
- wedevs wp erpWordPress WP ERP plugin <= 1.16.7 - Broken Access Control vulnerabilityCVE-2025-630085.3 Medium
- wedevs wedocs: ai powered knowledge base, docs, documentation, wiki & ai chatbotweDocs <= 2.1.14 - Missing Authorization to Settings UpdateCVE-2025-125055.4 Medium
- wedevs project manager – ai powered project management, task management, kanban board & time trackerWP Project Manager <= 2.6.26 - Authenticated (Subscriber+) SQL Injection via 'completed_at_operator'CVE-2025-89946.5 Medium
- wedevs wp project managerWordPress WP Project Manager Plugin <= 2.6.25 - Sensitive Data Exposure VulnerabilityCVE-2025-582695.3 Medium
- wedevs wp user frontendWordPress WP User Frontend Plugin <= 4.1.12 - Broken Access Control VulnerabilityCVE-2025-586725.4 Medium
- wedevs wp user frontendWordPress WP User Frontend Plugin <= 4.1.12 - Content Injection VulnerabilityCVE-2025-586735.4 Medium
- dokan pro, wedevs dokan pro +1 moreDokan Pro <= 4.0.5 - Authenticated (Vendor+) Privilege EscalationCVE-2025-59318.8 High
- badhonrocks divi torque lite, blossomthemes social feed, boldthemes bold page builder +12 more +14 moreMultiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript LibraryCVE-2024-56476.4 Medium
- wedevs wp user frontend proWP User Frontend Pro <= 4.1.3 - Authenticated (Subscriber+) Arbitrary File DeletionCVE-2025-30558.1 High
- wedevs wp user frontend proWP User Frontend Pro <= 4.1.3 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2025-3054Public exploit8.8 High
- unknown wp erp | complete hr solution with recruitment & job listings | woocommerce crm & accounting, wedevs wp erp +1 moreWP ERP < 1.13.4 - Custom+ Unauthorized Access to Terminated Employee InformationCVE-2024-128127.5 High
- unknown wp erp | complete hr solution with recruitment & job listings | woocommerce crm & accounting, wedevs wp erp +1 moreWP ERP | Complete HR solution with recruitment < 1.13.4 - Admin+ Stored XSSCVE-2024-128084.8 Medium
- wedevs wemailWordPress weMail plugin <= 1.14.13 - Sensitive Data Exposure VulnerabilityCVE-2025-475405.3 Medium
- wedevs appsero helperWordPress Appsero Helper plugin <= 1.3.4 - SQL Injection vulnerabilityCVE-2025-393778.5 High
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 moreWP Project Manager <= 2.6.22 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadCVE-2025-25416.4 Medium
- Show moreLoading…