Wpexperts vulnerabilities

Products

• Post Smtp 19
• User Management 10
• Mycred 7
• Apiexperts Square For Woocommerce 4
• Wholesale For Woocommerce 4
• Wp Multi Store Locator 3
• All In One Login 2
• License Manager For Woocommerce 2
• New User Approve 2
• Password Protected 2
• Post Smtp 2
• Wholesale For Woocommerce 2
• Wp Contact Slider 2

Newest

• saad iqbal apiexperts square for woocommerce WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-119466 5.4 MediumOctober 30, 2026
• saad iqbal apiexperts square for woocommerce WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability CVE-2026-115959 5.3 MediumOctober 26, 2026
• saad iqbal apiexperts square for woocommerce WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability CVE-2026-115960 4.3 MediumOctober 26, 2026
• saad iqbal advanced file manager WordPress Advanced File Manager plugin <= 5.4.14 - Broken Access Control vulnerability CVE-2026-110365 6.5 MediumOctober 18, 2026
• saad iqbal wp easypay WordPress WP EasyPay plugin <= 4.5.4 - Broken Access Control vulnerability CVE-2026-96449 5.3 MediumOctober 15, 2026
• saad iqbal apiexperts square for woocommerce WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability CVE-2026-110367 5.3 MediumOctober 15, 2026
• wpexperts cf7 apps WordPress CF7 Apps plugin <= 3.7.2 - Sensitive Data Exposure vulnerability CVE-2026-62058 5.3 MediumOctober 1, 2026
• saad iqbal post smtp WordPress Post SMTP plugin 4.0.0-beta.1 - Settings Change vulnerability CVE-2026-81278 5.4 MediumAugust 31, 2026
• wpexperts gravity forms bookings premium WordPress Gravity Forms Bookings premium plugin <= 2.1 - SQL Injection vulnerability CVE-2026-32466 8.5 HighAugust 18, 2026
• saadiqbal wholesale for woocommerce Wholesale for WooCommerce <= 2.0.5 - Authenticated (Author+) Privilege Escalation via 'user_role_set' Parameter CVE-2026-12144 8.8 HighJuly 29, 2026
• saadiqbal user management User Management <= 1.2 - Missing Authorization to Unauthenticated Plugin Settings Modification CVE-2026-12097 5.3 MediumJuly 8, 2026
• saad iqbal post smtp WordPress Post SMTP plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-48838 7.1 HighJune 15, 2026
• wpexperts post smtp, saadiqbal post smtp – complete email deliverability and smtp solution with email logs, alerts, backup smtp & mobile app +1 more Post SMTP <= 3.1.2 - Authenticated (Administrator+) SQL Injection via columns Parameter CVE-2024-13844 4.9 MediumMarch 8, 2025
• saadiqbal wpexperts square for givewp, wpexperts givewp square +1 more WPExperts Square For GiveWP <= 1.3.1 - Authenticated (Subscriber+) SQL Injection CVE-2024-13713 6.5 MediumFebruary 21, 2025
• wpexperts post smtp, saadiqbal post smtp – complete email deliverability and smtp solution with email logs, alerts, backup smtp & mobile app +1 more Post SMTP <= 3.0.2 - Unauthenticated Stored Cross-Site Scripting CVE-2025-0521 7.2 HighFebruary 18, 2025
• wpexperts wp multi store locator, wpexperts.io wp multistore locator +1 more WordPress WP Multi Store Locator Plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability CVE-2025-24680 7.1 HighJanuary 27, 2025
• saad iqbal user management WordPress User Management plugin <= 1.2 - Privilege Escalation vulnerability CVE-2025-22736 8.8 HighJanuary 15, 2025
• saad iqbal post smtp WordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerability CVE-2025-22800 4.3 MediumJanuary 13, 2025
• wpexperts wp multi store locator, wpexpertsio wp multistore locator — wp store locator plugin: effortless integration with snazzy maps +1 more WP Multi Store Locator <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-12475 6.4 MediumJanuary 4, 2025
• saad iqbal post smtp WordPress Post SMTP plugin <= 2.9.9 - SQL Injection vulnerability CVE-2024-52436 7.6 HighNovember 18, 2024
• saad iqbal user management WordPress User Management plugin <= 1.1 - Arbitrary File Upload vulnerability CVE-2024-52403 9.9 CriticalNovember 16, 2024
• 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
• mycred WordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerability CVE-2024-43214 5.3 MediumAugust 26, 2024
• unknown wp secure maintenance WP Secure Maintenance < 1.7 - Admin+ Stored XSS CVE-2024-4753 4.8 MediumJuly 12, 2024
• saad iqbal license manager for woocommerce License Manager for WooCommerce <= 3.0.6 - Improper Authorization to Authenticated(Contributor+) Sensitive Information Exposure CVE-2024-1639 6.5 MediumJune 21, 2024
• post smtp mailer/email log, unknown post smtp mailer/email log, wpexperts post smtp +1 more +3 more WordPress POST SMTP Mailer plugin <= 2.8.6 - Broken Access Control on API vulnerability CVE-2023-52233 8.6 HighJune 11, 2024
• wpexperts post smtp, saadiqbal post smtp – complete email deliverability and smtp solution with email logs, alerts, backup smtp & mobile app +1 more POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.9.3 - Authenticated (Administrator+) SQL Injection CVE-2024-5207 7.2 HighMay 30, 2024
• wpexperts wholesale for woocommerce WordPress Wholesale For WooCommerce plugin <= 2.3.1 - Unauthenticated Arbitrary Post/Page vulnerability CVE-2024-31297 7.5 HighApril 10, 2024
• wpexperts wholesale for woocommerce WordPress Wholesale For WooCommerce plugin <= 2.3.0 - Unauthenticated Sensitive Data Exposure vulnerability CVE-2024-30469 5.3 MediumMarch 29, 2024
• post smtp smtp, saad iqbal post smtp +1 more WordPress POST SMTP Mailer plugin <= 2.8.6 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-29128 7.1 HighMarch 19, 2024
• wpexperts wc shop sync, wpexpertsio wc shop sync – integrate square and woocommerce for seamless shop management +1 more WordPress APIExperts Square for WooCommerce plugin <= 4.2.9 - Cross Site Scripting (XSS) vulnerability CVE-2024-27959 7.1 HighMarch 17, 2024
• wpexperts password protected, saadiqbal password protected — lock entire site, pages, posts, categories, and partial content +1 more Password Protected <= 2.6.6 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-0656 4.4 MediumFebruary 20, 2024
• unknown post smtp mailer, wpexperts post smtp +1 more POST SMTP Mailer < 2.5.7 - Arbitrary Log Deletion via CSRF CVE-2023-3178 4.3 MediumJanuary 16, 2024
• unknown post smtp mailer, wpexperts post smtp +1 more Post SMTP < 2.8.7 - Admin+ SQL Injection CVE-2023-6620 EPSS 14.1% 7.2 HighJanuary 15, 2024
• wpexperts post smtp, saadiqbal post smtp – complete email deliverability and smtp solution with email logs, alerts, backup smtp & mobile app +1 more POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Authorization Bypass via type connect-app API CVE-2023-6875 Public exploit EPSS 90.3% 9.8 CriticalJanuary 11, 2024
• saad iqbal post smtp Post SMTP < 2.8.7 - Reflected Cross-Site Scripting CVE-2023-6621 6.1 MediumJanuary 3, 2024
• wpexperts post smtp, saadiqbal post smtp – complete email deliverability and smtp solution with email logs, alerts, backup smtp & mobile app +1 more POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Unauthenticated Stored Cross-Site Scripting via device CVE-2023-7027 7.2 HighJanuary 3, 2024
• wpexperts post smtp, saadiqbal post smtp – complete email deliverability and smtp solution with email logs, alerts, backup smtp & mobile app +1 more POST SMTP Mailer <= 2.8.6 - Reflected Cross-Site Scripting via msg CVE-2023-6629 6.1 MediumJanuary 3, 2024
• saad iqbal new user approve WordPress New User Approve Plugin <= 2.5.1 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-50902 4.3 MediumDecember 29, 2023
• wpexpertsio rocket maintenance mode & coming soon page, wpexperts rocket maintenance mode \& coming soon page +1 more WordPress Rocket Maintenance Mode & Coming Soon Page Plugin <= 4.3 is vulnerable to Cross Site Scripting (XSS) CVE-2023-49842 5.9 MediumDecember 14, 2023
• mycred – points, rewards, gamification, ranks, badges & loyalty plugin, wpexperts mycred +1 more WordPress myCred Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS) CVE-2023-47853 6.5 MediumNovember 30, 2023
• licensemanager license manager for woocommerce WordPress License Manager for WooCommerce Plugin <= 2.2.10 is vulnerable to SQL Injection CVE-2023-48742 7.6 HighNovember 30, 2023
• unknown post smtp mailer, wpexperts post smtp +1 more POST SMTP Mailer < 2.7.1 - Unauthenticated Cross-site Scripting CVE-2023-5958 6.1 MediumNovember 27, 2023
• wpexperts email templates customizer and designer, wpexpertsio email templates customizer and designer for wordpress and woocommerce +1 more WordPress Email Templates Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2022-47181 4.3 MediumNovember 7, 2023
• unknown user avatar, wpexperts user avatar-reloaded +1 more User Avatar - Reloaded < 1.2.2 - Contributor+ Stored XSS CVE-2023-4798 5.4 MediumOctober 16, 2023
• unknown change wp admin login, wpexperts all in one login +1 more Change WP Admin < 1.1.4 - Secret Login Page Disclosure CVE-2023-3604 7.5 HighAugust 21, 2023
• mycred WordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-35096 5.4 MediumJuly 17, 2023
• unknown post smtp mailer, wpexperts post smtp +1 more POST SMTP Mailer < 2.5.7 - Account Takeover via CSRF CVE-2023-3179 8.8 HighJuly 17, 2023
• wpexperts wp pdf generator WordPress WP PDF Generator Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-35038 5.4 MediumJuly 17, 2023
• wpexperts post smtp, saadiqbal post smtp – complete email deliverability and smtp solution with email logs, alerts, backup smtp & mobile app +1 more POST SMTP Mailer <= 2.0.20 - Cross-Site Request Forgery Bypass CVE-2021-4422 4.3 MediumJuly 12, 2023
• Show olderLoading…