Saad Iqbal vulnerabilities, page 3

48 vulnerabilities

Known vulnerabilities in Saad Iqbal products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 18 products.

6.5CVE-2026-66425saad iqbalgutena forms – contact form, survey form, feedback form, booking form, and custom form builder+1
EPSS score
0.42%
Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 versions.
6.5CVE-2026-27440saad iqbalmycred+1
EPSS score
0.27%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred mycred allows Stored XSS.This issue affects myCred: from n/a through <= 2.9.7.6.
6.5CVE-2026-57808saad iqbalwp easypay+1
EPSS score
0.30%
Subscriber Arbitrary Content Deletion in WP EasyPay <= 4.5.0 versions.
8.5CVE-2026-57810saad iqbalapiexperts square for woocommerce+1
EPSS score
0.36%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExperts Square for WooCommerce woosquare allows Blind SQL Injection.This issue affects APIExperts Square for WooCommerce: from n/a through <= 4.7.4.
4.3CVE-2026-24951saad iqbalmycred+1
EPSS score
0.21%
Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through <= 2.9.7.3.
8.5CVE-2026-45211saad iqbalapiexperts square for woocommerce+1
EPSS score
0.36%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExperts Square for WooCommerce woosquare allows Blind SQL Injection.This issue affects APIExperts Square for WooCommerce: from n/a through <= 4.7.1.
5.3CVE-2026-45215saad iqbalwp easypay+1
EPSS score
0.33%
Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP EasyPay: from n/a through <= 4.3.0.
5.4CVE-2026-32587saad iqbalwp easypay+1
EPSS score
0.30%
Missing Authorization vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP EasyPay: from n/a through <= 4.2.11.