Wphocus vulnerabilities

Products

• My Auctions Allegro 13

Newest

• wphocus my auctions allegro WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability CVE-2026-116855 5.4 MediumOctober 28, 2026
• wphocus my auctions allegro WordPress My auctions allegro plugin <= 3.6.35 - Cross Site Scripting (XSS) vulnerability CVE-2026-22491 7.1 HighMarch 25, 2026
• wphocus my auctions allegro WordPress My auctions allegro plugin <= 3.6.33 - Local File Inclusion vulnerability CVE-2026-22464 7.5 HighJanuary 22, 2026
• wphocus my auctions allegro WordPress My auctions allegro plugin <= 3.6.32 - Cross Site Scripting (XSS) vulnerability CVE-2025-67943 7.1 HighJanuary 22, 2026
• wphocus my auctions allegro WordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-68567 5.4 MediumDecember 24, 2025
• wphocus my auctions allegro WordPress My auctions allegro plugin <= 3.6.35 - Cross Site Scripting (XSS) vulnerability CVE-2025-68566 5.9 MediumDecember 24, 2025
• wphocus my auctions allegro My auctions allegro <= 3.6.32 - Unauthenticated Local File Inclusion via controller CVE-2025-12851 8.1 HighDecember 5, 2025
• wphocus my auctions allegro My auctions allegro <= 3.6.32 - Unauthenticated SQL Injection via auction_id CVE-2025-12850 7.5 HighDecember 5, 2025
• wphocus my auctions allegro My Auctions Allegro Plugin <= 3.6.31 - Authenticated (Admin+) SQL Injection CVE-2025-10048 4.9 MediumOctober 11, 2025
• wphocus my auctions allegro WordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-27009 7.1 HighApril 14, 2025
• wphocus my auctions allegro WordPress My auctions allegro plugin <= 3.6.20 - SQL Injection vulnerability CVE-2025-31542 8.5 HighMarch 31, 2025
• wphocus my auctions allegro WordPress My auctions allegro Plugin <= 3.6.18 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-22733 7.1 HighJanuary 21, 2025
• wphocus my auctions allegro My auctions allegro <= 3.6.17 - Reflected Cross-Site Scripting CVE-2024-11707 6.1 MediumDecember 3, 2024