Skip to contentWphocus My Auctions Allegro vulnerabilities
- wphocus my auctions allegroWordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerabilityCVE-2026-1168555.4 Medium
- wphocus my auctions allegroWordPress My auctions allegro plugin <= 3.6.35 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-224917.1 High
- wphocus my auctions allegroWordPress My auctions allegro plugin <= 3.6.33 - Local File Inclusion vulnerabilityCVE-2026-224647.5 High
- wphocus my auctions allegroWordPress My auctions allegro plugin <= 3.6.32 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-679437.1 High
- wphocus my auctions allegroWordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-685675.4 Medium
- wphocus my auctions allegroWordPress My auctions allegro plugin <= 3.6.35 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-685665.9 Medium
- wphocus my auctions allegroMy auctions allegro <= 3.6.32 - Unauthenticated Local File Inclusion via controllerCVE-2025-128518.1 High
- wphocus my auctions allegroMy auctions allegro <= 3.6.32 - Unauthenticated SQL Injection via auction_idCVE-2025-128507.5 High
- wphocus my auctions allegroMy Auctions Allegro Plugin <= 3.6.31 - Authenticated (Admin+) SQL InjectionCVE-2025-100484.9 Medium
- wphocus my auctions allegroWordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-270097.1 High
- wphocus my auctions allegroWordPress My auctions allegro plugin <= 3.6.20 - SQL Injection vulnerabilityCVE-2025-315428.5 High
- wphocus my auctions allegroWordPress My auctions allegro Plugin <= 3.6.18 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-227337.1 High
- wphocus my auctions allegroMy auctions allegro <= 3.6.17 - Reflected Cross-Site ScriptingCVE-2024-117076.1 Medium