Skip to contentWpdeveloper vulnerabilities
Newest
- wpdeveloper essential blocks, wpdevteam essential blocks pro, gutenberg essential blocks – page builder for gutenberg blocks & patterns +2 moreEssential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queriesCVE-2023-43868.1 High
- wpdeveloper essential blocks, essential blocks pro, wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns +2 moreEssential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via productsCVE-2023-44028.1 High
- essential addons for elementor pro, wpdeveloper essential addons for elementor pro, essential addons for elementor +2 moreWordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Cross Site Scripting (XSS)CVE-2023-322417.1 High
- wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 moreEmbedPress <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-42836.4 Medium
- wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 moreEmbedPress <= 3.8.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Delete via admin_post_remove and remove_private_dataCVE-2023-42825.4 Medium
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key DisclosureCVE-2023-37795.3 Medium
- wpdeveloper notificationx, wpdevteam notificationx – fomo, live sales notification, woocommerce sales popup, gdpr, social proof, announcement banner & floating notification bar +1 moreNotificationX <= 1.8.2 - Cross-Site Request Forgery BypassCVE-2020-367444.3 Medium
- wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 moreEmbedPress <= 3.7.3 - Sensitive Information ExposureCVE-2023-33715.3 Medium
- wpdeveloper essential blocks, wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns +1 moreEssential Blocks <= 4.0.6 - Missing Authorization via saveCVE-2023-20834.3 Medium
- wpdeveloper essential blocks, wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns +1 moreEssential Blocks <= 4.0.6 - Cross-Site Request Forgery via saveCVE-2023-20874.3 Medium
- wpdeveloper essential blocks, wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns +1 moreEssential Blocks <= 4.0.6 - Missing Authorization via templatesCVE-2023-20854.3 Medium
- wpdeveloper essential blocks, wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns +1 moreEssential Blocks <= 4.0.6 - Missing Authorization via template_countCVE-2023-20864.3 Medium
- wpdeveloper essential blocks, wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns +1 moreEssential Blocks <= 4.0.6 - Missing Authorization via getCVE-2023-20844.3 Medium
- wpdeveloper reviewx, reviewx – multi-criteria reviews for woocommerce with google reviews & schema +1 moreReviewX <= 1.6.13 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege EscalationCVE-2023-2833Public exploitEPSS 17.5%8.8 High
- wpdeveloper essential addons for elementorWordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege EscalationCVE-2023-32243Public exploitEPSS 75.5%9.8 Critical
- wpdeveloper reviewxThe 'rx_export_review' action in the ReviewX WordPress Plugin version < 1.6.4, is affected by an...CVE-2023-263258.8 High
- wpdeveloper notificationx, unknown notificationx – best fomo, social proof, woocommerce sales popup & notification bar plugin with elementor +1 moreNotificationX < 2.3.9 - Unauthenticated Blind SQL InjectionCVE-2022-0349EPSS 34.4%9.8 Critical
- essential addons for elementor lite addons for elementor lite, wpdeveloper essential addons for elementor +1 moreEssential Addons for Elementor Lite <= 5.0.8 Reflected Cross-Site ScriptingCVE-2022-06836.1 Medium
- unknown essential addons for elementorEssential Addons for Elementor < 5.0.5 - Unauthenticated LFICVE-2022-03209.8 Critical
- wpdeveloper betterlinks, unknown betterlinks – shorten, track and manage any url +1 moreBetterLinks < 1.2.6 - Admin+ Stored Cross-Site ScriptingCVE-2021-248125.4 Medium
- unknown countdown blockCountdown Block < 1.1.2 - Missing Authorisation in AJAX actionCVE-2021-246334.3 Medium
- unknown simple 301 redirects by betterlinks, wpdeveloper simple 301 redirects +1 moreSimple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Arbitrary Plugin ActivationCVE-2021-24356Public exploit8.8 High
- unknown simple 301 redirects by betterlinks, wpdeveloper simple 301 redirects +1 moreSimple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Update and Retrieve Wildcard ValueCVE-2021-243554.3 Medium
- unknown simple 301 redirects by betterlinks, wpdeveloper simple 301 redirects +1 moreSimple 301 Redirects by BetterLinks - 2.0.0-2.0.3 - Arbitrary Plugin InstallationCVE-2021-243548.8 High
- unknown simple 301 redirects by betterlinks, wpdeveloper simple 301 redirects +1 moreSimple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect ImportCVE-2021-243538.8 High
- unknown simple 301 redirects by betterlinks, wpdeveloper simple 301 redirects +1 moreSimple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect ExportCVE-2021-243528.8 High
- unknown essential addons for elementorEssential Addons for Elementor < 4.5.4 - Contributor+ Stored Cross-Site Scripting (XSS)CVE-2021-242555.4 Medium
- wpdeveloper twitter cards metaThe twitter-cards-meta plugin before 2.5.0 for WordPress has XSS.CVE-2017-185036.1 Medium
- wpdeveloper twitter cards metaThe twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF.CVE-2017-185048.8 High