Skip to content
Wpcenter vulnerabilities
Newest
-
digitalme eroom
WordPress eRoom plugin <= 1.7.1 - Settings Change vulnerability
CVE-2026-114175
5.4 Medium
-
digitalme eroom
WordPress eRoom plugin <= 1.7.1 - Broken Access Control vulnerability
CVE-2026-114176
4.3 Medium
-
digitalme eroom
WordPress eRoom plugin <= 1.7.1 - Broken Authentication vulnerability
CVE-2026-62038
7.3 High
-
wpcenter affiliatex
WordPress AffiliateX plugin <= 2.3.5 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-65558
5.4 Medium
-
digitalme eroom
WordPress eRoom plugin <= 1.7.1 - Broken Access Control vulnerability
CVE-2026-25427
5.4 Medium
-
digitalme eroom
WordPress eRoom plugin <= 1.7.1 - SQL Injection vulnerability
CVE-2026-25405
8.5 High
-
wpcenter affiliatex – amazon affiliate plugin
AffiliateX 1.0.0 - 1.3.9.3 - Authenticated (Subscriber+) Missing Authorization to Stored Cross-Site Scripting via save_customization_settings
CVE-2025-13859
6.4 Medium
-
wpcenter affiliatex
WordPress AffiliateX plugin <= 1.3.9.3 - Broken Access Control vulnerability
CVE-2025-69346
4.3 Medium
-
digitalme eroom
WordPress eRoom plugin <= 1.5.6 - Sensitive Data Exposure vulnerability
CVE-2025-49919
5.8 Medium
-
digitalmeactivecampaign eroom – webinar & meeting plugin for zoom, google meet, microsoft teams
eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.5.6 - Unauthenticated Sensitive Information Exposure
CVE-2025-11760
5.3 Medium
-
webfactory aibud wp
WordPress AiBud WP plugin <= 1.9 - Arbitrary File Upload vulnerability
CVE-2025-23968
Public exploit
9.1 Critical
-
affiliatexblocks affiliatex
WordPress AffiliateX plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49692
6.5 Medium
-
digitalmeactivecampaign eroom – webinar & meeting plugin for zoom, google meet, microsoft teams
eRoom – Zoom Meetings & Webinar <= 1.4.18 - Missing Authorization to Information Exposure
CVE-2024-3275
4.3 Medium