CveMateVulnerability intelligence

Saad Iqbal vulnerabilities, page 2

48 vulnerabilities

Known vulnerabilities in Saad Iqbal products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 18 products.

CVE-2025-49872saad iqbalmycred+11y ago17-06-2025 15:01

Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects myCred: from n/a through <= 2.9.4.2.CVE-2025-32522saad iqballicense manager for woocommerce+11y ago17-04-2025 15:47

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-for-woocommerce allows Reflected XSS.This issue affects License Manager for WooCommerce: from n/a through <= 3.0.9.CVE-2025-30609saad iqbalappexperts+11y ago24-03-2025 13:47

Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal AppExperts appexperts allows Retrieve Embedded Sensitive Data.This issue affects AppExperts: from n/a through <= 1.4.3.CVE-2024-54323saad iqbalnew user approve+11y ago13-12-2024 14:25

Missing Authorization vulnerability in Saad Iqbal New User Approve new-user-approve allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects New User Approve: from n/a through <= 2.6.2.CVE-2024-52436saad iqbalpost smtp+21y ago18-11-2024 14:30

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal Post SMTP post-smtp allows Blind SQL Injection.This issue affects Post SMTP: from n/a through <= 2.9.9.CVE-2024-52403saad iqbaluser management+11y ago16-11-2024 21:53

Unrestricted Upload of File with Dangerous Type vulnerability in Saad Iqbal User Management user-management allows Upload a Web Shell to a Web Server.This issue affects User Management: from n/a through <= 1.1.CVE-2024-47338saad iqbalwpexperts square for givewp+12y ago06-10-2024 12:58

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal WPExperts Square For GiveWP wpexperts-square-for-give allows SQL Injection.This issue affects WPExperts Square For GiveWP: from n/a through <= 1.3.CVE-2024-43214saad iqbalmycred+22y ago26-08-2024 20:21

Missing Authorization vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through <= 2.7.2.CVE-2024-43354saad iqbalmycred+12y ago19-08-2024 19:30

Deserialization of Untrusted Data vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through <= 2.7.2.CVE-2024-43353saad iqbalmycred+12y ago18-08-2024 13:02

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through <= 2.7.2.CVE-2024-49702mycredmycred_elementor+21y ago24-10-2024 12:28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred Elementor mycred-for-elementor allows Stored XSS.This issue affects myCred Elementor: from n/a through <= 1.2.6.CVE-2024-32711saad iqbalmycred+12y ago24-04-2024 10:11

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through <= 2.6.3.CVE-2026-54848saad iqbalapiexperts square for woocommerce+13mo ago25-06-2026 13:26

Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal APIExperts Square for WooCommerce allows Retrieve Embedded Sensitive Data. This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.3.CVE-2026-73345saad iqballicense manager for woocommerce+12mo ago18-08-2026 14:00

Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions.CVE-2026-61958saad iqballicense manager for woocommerce+13mo ago13-07-2026 08:41

Missing Authorization vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects License Manager for WooCommerce: from n/a through <= 3.0.17.CVE-2026-61968saad iqbalmycred+13mo ago13-07-2026 08:41

Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through <= 3.1.2.CVE-2026-84762saad iqbalwp easypay+11mo ago03-09-2026 16:31

Unauthenticated Bypass Vulnerability in WP EasyPay <= 4.5.3 versions.CVE-2026-25001saad iqbalpost snippets+17mo ago25-03-2026 16:14

Improper Control of Generation of Code ('Code Injection') vulnerability in Saad Iqbal Post Snippets post-snippets allows Remote Code Inclusion.This issue affects Post Snippets: from n/a through <= 4.0.12.CVE-2026-25390saad iqbalnew user approve+17mo ago25-03-2026 16:14

Missing Authorization vulnerability in Saad Iqbal New User Approve new-user-approve allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects New User Approve: from n/a through <= 3.2.3.CVE-2026-56024saad iqbalwp easypay+14mo ago18-06-2026 15:27

Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal WP EasyPay allows Cross Site Request Forgery. This issue affects WP EasyPay: from n/a through 4.5.0.