CveMateVulnerability intelligence

Saad Iqbal vulnerabilities

48 vulnerabilities

Known vulnerabilities in Saad Iqbal products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 18 products.

Products

18

Mycred11 vulnerabilities
WP Easypay5 vulnerabilities
License Manager For Woocommerce4 vulnerabilities
New User Approve4 vulnerabilities
Post SMTP4 vulnerabilities
Apiexperts Square For Woocommerce3 vulnerabilities
Appexperts3 vulnerabilities
Post Snippets2 vulnerabilities
Quick Contact Form2 vulnerabilities
User Management2 vulnerabilities
Advanced File Manager1 vulnerabilities
All In One Login1 vulnerabilities
Bookify1 vulnerabilities
Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, And Custom Form Builder1 vulnerabilities
Gutena Kit – Gutenberg Blocks And Templates1 vulnerabilities
Mycred Elementor1 vulnerabilities
User Avatar Reloaded1 vulnerabilities
Wpexperts Square For Givewp1 vulnerabilities

CVE-2025-63040saad iqbalpost snippets+19mo ago31-12-2025 16:08

Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal Post Snippets post-snippets allows Cross Site Request Forgery.This issue affects Post Snippets: from n/a through <= 4.0.11.CVE-2025-63030saad iqbalnew user approve+110mo ago09-12-2025 14:52

Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal New User Approve new-user-approve allows Cross Site Request Forgery.This issue affects New User Approve: from n/a through <= 3.2.3.CVE-2025-54668saad iqbalmycred+11y ago14-08-2025 10:34

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred mycred allows Stored XSS.This issue affects myCred: from n/a through <= 2.9.4.3.CVE-2025-54667saad iqbalmycred+11y ago14-08-2025 10:34

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Saad Iqbal myCred mycred allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions.This issue affects myCred: from n/a through <= 2.9.4.3.CVE-2025-68080saad iqbaluser avatar - reloaded+110mo ago16-12-2025 08:13

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal User Avatar - Reloaded user-avatar-reloaded allows Stored XSS.This issue affects User Avatar - Reloaded: from n/a through <= 1.2.2.CVE-2025-68881saad iqbalappexperts+19mo ago22-01-2026 16:52

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal AppExperts appexperts allows SQL Injection.This issue affects AppExperts: from n/a through <= 1.4.5.CVE-2025-47688advancedfilemanageradvanced_file_manager+21y ago07-05-2025 14:20

Missing Authorization vulnerability in Saad Iqbal Advanced File Manager file-manager-advanced allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced File Manager: from n/a through <= 5.3.1.CVE-2025-48142saad iqbalbookify+11y ago20-08-2025 08:03

Incorrect Privilege Assignment vulnerability in Saad Iqbal Bookify bookify allows Privilege Escalation.This issue affects Bookify: from n/a through <= 1.0.9.CVE-2025-48245saad iqbalquick contact form+11y ago23-05-2025 12:43

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal Quick Contact Form quick-contact-form allows Reflected XSS.This issue affects Quick Contact Form: from n/a through <= 8.2.1.CVE-2025-31805saad iqbalgutena kit – gutenberg blocks and templates+11y ago01-04-2025 14:51

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal Gutena Kit – Gutenberg Blocks and Templates gutena-kit allows Stored XSS.This issue affects Gutena Kit – Gutenberg Blocks and Templates: from n/a through <= 2.0.7.CVE-2025-53218saad iqbalappexperts+112mo ago22-10-2025 14:32

Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal AppExperts appexperts allows Retrieve Embedded Sensitive Data.This issue affects AppExperts: from n/a through <= 1.4.5.CVE-2025-58595saad iqbalall in one login+111mo ago06-11-2025 15:54

Authentication Bypass by Spoofing vulnerability in Saad Iqbal All In One Login change-wp-admin-login allows Identity Spoofing.This issue affects All In One Login: from n/a through <= 2.0.8.CVE-2025-58788saad iqballicense manager for woocommerce+11y ago05-09-2025 13:44

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-for-woocommerce allows Blind SQL Injection.This issue affects License Manager for WooCommerce: from n/a through <= 3.0.12.CVE-2025-67471saad iqbalquick contact form+110mo ago09-12-2025 14:13

Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal Quick Contact Form quick-contact-form allows Cross Site Request Forgery.This issue affects Quick Contact Form: from n/a through <= 8.2.5.CVE-2025-67563saad iqbalpost smtp10mo ago09-12-2025 14:14

Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post SMTP: from n/a through <= 3.6.1.CVE-2025-22736saad iqbaluser management+11y ago15-01-2025 15:23

Incorrect Privilege Assignment vulnerability in Saad Iqbal User Management user-management allows Privilege Escalation.This issue affects User Management: from n/a through <= 1.2.CVE-2025-22800saad iqbalpost smtp+21y ago13-01-2025 13:11

Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post SMTP: from n/a through <= 2.9.11.CVE-2025-69063saad iqbalnew user approve+18mo ago20-02-2026 15:46

Missing Authorization vulnerability in Saad Iqbal New User Approve new-user-approve allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects New User Approve: from n/a through <= 3.2.0.CVE-2025-24000saad iqbalpost smtp+11y ago07-08-2025 16:58

Authentication Bypass Using an Alternate Path or Channel vulnerability in Saad Iqbal Post SMTP post-smtp allows Authentication Bypass.This issue affects Post SMTP: from n/a through <= 3.2.0.CVE-2025-49857saad iqbalmycred+11y ago17-06-2025 15:01

Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through <= 2.9.4.2.