Wpkube vulnerabilities

Products

• Kiwi 14
• Authors List 5
• Cool Tag Cloud 3
• Simple Basic Contact Form 3
• Authors List 2
• Kiwi Social Share 2
• Simple Basic Contact Form 2
• Social Sharing Plugin – Kiwi 2
• Subscribe To Comments Reloaded 2
• Subscribe To Comments Reloaded 2

Newest

• unknown captcha 4wp WordPress CAPTCHA 4WP plugin <= 7.6.0 - Captcha Bypass vulnerability CVE-2026-32469 5.3 MediumAugust 6, 2026
• kiwitcms kiwi Kiwi TCMS: Stored XSS via javascript: URI in extra_link field (TestPlan & TestCase) CVE-2026-55630 0.0 NoneJuly 6, 2026
• kiwitcms kiwi Kiwi TCMS: Open Redirect via unvalidated next parameter in account confirmation endpoint CVE-2026-54724 6.1 MediumJuly 6, 2026
• kiwitcms kiwi Kiwi TCMS: The /init-db/ page renders and responds to requests after first use CVE-2026-49292 0.0 NoneJuly 2, 2026
• wpkube subscribe to comments reloaded Subscribe To Comments Reloaded <= 240119 - Improper Authorization to Unauthenticated Arbitrary Subscription Management CVE-2026-4409 6.5 MediumMay 5, 2026
• wpkube cool tag cloud WordPress Cool Tag Cloud plugin <= 2.29 - Cross Site Scripting (XSS) vulnerability CVE-2025-69011 6.5 MediumFebruary 20, 2026
• wpkube cool tag cloud Cool Tag Cloud <= 2.29 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-13614 8.1 HighDecember 5, 2025
• wpkube authors list Authors List <= 2.0.6.1 - Authenticated (Contributor+) Sensitive Information Exposure via Limited Method Call in Plugin's Shortcode CVE-2025-12010 6.5 MediumNovember 11, 2025
• wpkube authors list WordPress Authors List plugin <= 2.0.6.2 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-58792 4.3 MediumSeptember 5, 2025
• wpkube kiwi WordPress Kiwi Plugin <= 2.1.8 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58790 6.5 MediumSeptember 5, 2025
• unknown simple basic contact form Simple Basic Contact Form < 20250114 - Admin+ Stored XSS CVE-2024-12716 4.8 MediumMay 15, 2025
• wpkube authors list Authors List <= 2.0.6 - Unauthenticated Arbitrary Shortcode Execution CVE-2024-13806 6.5 MediumMarch 1, 2025
• wpkube authors list Authors List <= 2.0.4 - Unauthenticated Arbitrary Shortcode Execution via update_authors_list_ajax CVE-2024-10952 7.3 HighDecember 4, 2024
• 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
• wpkube social sharing plugin – kiwi, kiwi social share +1 more Social Sharing Plugin – Kiwi <= 2.1.7 - Information Disclosure CVE-2024-3228 5.3 MediumJuly 9, 2024
• unknown simple basic contact form Simple Basic Contact Form <= 20240502 - Unauthenticated Arbitrary Shortcode Execution CVE-2024-4144 6.5 MediumMay 14, 2024
• unknown simple basic contact form Simple Basic Contact Form <= 20221201 - Reflected Cross-Site Scripting CVE-2024-4150 6.1 MediumMay 9, 2024
• wpkube subscribe to comments reloaded WordPress Subscribe To Comments Reloaded plugin <= 220725 - Sensitive Data Exposure vulnerability CVE-2024-31249 5.3 MediumApril 10, 2024
• wpkube authors list WordPress Authors List Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-37981 7.1 HighJuly 27, 2023
• kiwitcms kiwi, kiwi tcms +1 more Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox CVE-2023-36809 Fix available 8.1 HighJuly 5, 2023
• wpkube kiwi social share, social sharing plugin – kiwi +1 more The Kiwi Social Share plugin for WordPress is vulnerable to authorization bypass due to a missing... CVE-2021-4362 9.8 CriticalJune 7, 2023
• kiwitcms kiwi, kiwi tcms +1 more Stored cross site scripting (XSS) via unrestricted file upload in Kiwi TCMS CVE-2023-33977 Public exploitFix available 8.1 HighJune 6, 2023
• kiwitcms kiwi, kiwi tcms +1 more kiwitcms vulnerable to stored XSS via unrestricted files upload CVE-2023-32686 Fix available 8.1 HighMay 22, 2023
• kiwitcms kiwi, kiwi tcms +1 more Kiwi TCMS has command injection vulnerability in changelog.yml CI workflow CVE-2023-30628 Fix available 8.8 HighApril 24, 2023
• kiwitcms kiwi, kiwi tcms +1 more Kiwi TCMS unrestricted file upload vulnerability CVE-2023-30613 Fix available 8.1 HighApril 24, 2023
• kiwitcms kiwi, kiwi tcms +1 more Kiwi TCMS may allow user to update email address to unverified one CVE-2023-30544 Fix available 3.9 LowApril 24, 2023
• kiwitcms kiwi, kiwi tcms +1 more Stored cross site scripting via SVG file upload in Kiwi TCMS CVE-2023-27489 Fix available 7.6 HighMarch 29, 2023
• kiwitcms kiwi, kiwi tcms +1 more Kiwi TCMS has denial of service vulnerability on Password reset page CVE-2023-25171 Fix available 7.5 HighFebruary 15, 2023
• kiwitcms kiwi, kiwi tcms +1 more Kiwi TCMS has no protection against brute-force attacks on login page CVE-2023-25156 Fix available 7.5 HighFebruary 15, 2023
• kiwitcms kiwi, kiwi tcms +1 more Weak password requirements in Kiwi TCMS CVE-2023-22451 6.5 MediumJanuary 2, 2023
• unknown simple basic contact form Simple Basic Contact Form < 20221201 - Admin+ Stored XSS CVE-2022-4226 4.8 MediumDecember 26, 2022
• wpkube subscribe to comments reloaded, subscribe to comments reloaded (wordpress plugin) +1 more WordPress Subscribe To Comments Reloaded plugin <= 211130 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities CVE-2022-29414 5.4 MediumApril 29, 2022
• unknown about author box About Author Box < 1.0.2 - Contributor+ Stored Cross-Site Scripting CVE-2021-24745 5.4 MediumNovember 29, 2021
• unknown cool tag cloud Cool Tag Cloud < 2.26 - Contributor+ Stored Cross-Site Scripting CVE-2021-24682 5.4 MediumNovember 1, 2021