Wedevs vulnerabilities, page 4

128 vulnerabilities

Known vulnerabilities in Wedevs products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 32 products.

5.3MediumCVE-2024-34442wedevs · wedocs +1 moreWordPress weDocs plugin <= 2.1.4 - Broken Access Control vulnerabilityMissing Authorization vulnerability in weDevs weDocs.This issue affects weDocs: from n/a through 2.1.4.EPSS0.37%5.3MediumCVE-2024-34822wedevs · wemail +1 moreWordPress weMail plugin <= 1.14.2 - Broken Access Control vulnerabilityMissing Authorization vulnerability in weDevs weMail.This issue affects weMail: from n/a through 1.14.2.EPSS0.38%7.2HighCVE-2026-73393wedevs · subscribe2 +1 moreWordPress Subscribe2 plugin <= 10.46 - Cross Site Scripting (XSS) vulnerabilityUnauthenticated Cross Site Scripting (XSS) in Subscribe2 <= 10.46 versions.EPSS0.25%5.3MediumCVE-2026-2233wedevs · user frontend: ai powered frontend posting, user directory, profile, membership & user registration +1 moreUser Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Post Modification via 'post_id' ParameterThe User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the draft_post() function in all versions up to, and including, 4.2.8. This makes it possible for unauthenticated attackers to modify arbitrary posts (e.g. unpublish published posts and overwrite the contents) via the 'post_id' parameter.EPSS0.20%5.3MediumCVE-2026-13110wedevs · storegrowth – upsell, bogo, quick view, direct checkout & side cart for woocommerce +1 moreStoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.0 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification via bogo_category_msg_create AJAX ActionThe Storegrowth Sales Booster plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 2.1.0. This is due to a missing capability check on the bogo_category_msg_create() AJAX handler, which is registered for both authenticated (wp_ajax_) and unauthenticated (wp_ajax_nopriv_) users and only validates a nonce ('ajd_protected') that is emitted publicly via wp_localize_script() on every frontend page through front_scripts() . This makes it possible for unauthenticated attackers to modify the plugin's BOGO category-message configuration stored in the spsg_bogo_general_settings option by reading the nonce from any public page and POSTing attacker-controlled data to admin-ajax.EPSS0.40%7.2HighCVE-2026-13440wedevs · storegrowth – upsell, bogo, quick view, direct checkout & side cart for woocommerce +1 moreStoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.0 - Unauthenticated Stored Cross-Site Scripting via 'message_popup' ParameterThe StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'message_popup' parameter in all versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The exploit is possible because the 'ajd_protected' nonce required by the create_popup handler is exposed to all unauthenticated frontend visitors via wp_localize_script under bogo_save_url.ajd_nonce, effectively bypassing the nonce-only access control.EPSS0.46%6.5MediumCVE-2026-13011wedevs · erp: complete hr, accounting & crm suite built for woocommerce +1 moreERP: Complete HR, Accounting & CRM Suite with Recruitment and WooCommerce CRM Support <= 1.17.5 - Authenticated (HR Manager+) SQL Injection via 'orderby' ParameterThe ERP: Complete HR, Accounting & CRM Suite with Recruitment and WooCommerce CRM Support plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 1.17.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with custom-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Exploitation requires the erp_list_employee capability, which is granted to HR Manager-level users and above within the WP ERP plugin.EPSS0.45%6.5MediumCVE-2026-59522wedevs · wp_erp +1 moreWordPress WP ERP plugin <= 1.17.5 - Broken Access Control vulnerabilitySubscriber Broken Access Control in WP ERP <= 1.17.5 versions.EPSS0.34%8.8HighCVE-2026-1565wedevs · user frontend: ai powered frontend posting, user directory, profile, membership & user registration +1 moreUser Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Authenticated (Author+) Arbitrary File UploadThe User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'WPUF_Admin_Settings::check_filetype_and_ext' function and in the 'Admin_Tools::check_filetype_and_ext' function in all versions up to, and including, 4.2.8. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.EPSS0.57%7.2HighCVE-2026-65492wedevs · dokan pro +1 moreWordPress Dokan Pro plugin < 5.0.7 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Dokan Pro allows Reflected XSS. This issue affects Dokan Pro: from n/a before 5.0.7.EPSS0.25%6.5MediumCVE-2026-11421wedevs · erp: complete hr, accounting & crm suite built for woocommerce +1 moreERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support <= 1.17.4 - Authenticated (Custom+) SQL Injection via 'erpadvancefilter' ParameterThe ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support plugin for WordPress is vulnerable to SQL Injection via the 'erpadvancefilter' parameter in all versions up to, and including, 1.17.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. The handler runs the value through sanitize_text_field, which preserves single quotes, and the downstream erp_crm_contact_advance_filter() function interpolates it directly into a single-quoted SQL WHERE clause before execution via $wpdb->get_results(). This makes it possible for authenticated attackers, with the plugin-supplied CRM Agent role (or higher CRM Manager / WordPress admin) and the erp_crm_list_contact capability, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.EPSS0.55%6.5MediumCVE-2026-42412wedevs · wp_user_frontend +1 moreWordPress WP User Frontend plugin <= 4.3.1 - Broken Access Control vulnerabilityMissing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP User Frontend: from n/a through 4.3.1.EPSS0.33%8.5HighCVE-2026-31917wedevs · wp_erp +1 moreWordPress WP ERP plugin <= 1.16.10 - SQL Injection vulnerabilityImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP ERP erp allows SQL Injection.This issue affects WP ERP: from n/a through <= 1.16.10.EPSS0.37%4.3MediumCVE-2026-4058wedevs · user frontend: ai powered frontend posting, user directory, profile, membership & user registration +1 moreUser Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.2 - Missing Authorization to Authenticated (Subscriber+) Subscription Pack CancellationThe User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the user_subscription_cancel() function in all versions up to, and including, 4.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to cancel any user's subscription pack, including administrators.EPSS0.26%7.5HighCVE-2026-4834wedevs · wp erp pro +1 moreWP ERP Pro <= 1.5.1 - Unauthenticated SQL Injection via 'search_key' ParameterThe WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'search_key' parameter in all versions up to, and including, 1.5.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.EPSS0.46%5.3MediumCVE-2026-39520wedevs · wedocs +1 moreWordPress weDocs plugin <= 2.1.18 - Broken Access Control vulnerabilityMissing Authorization vulnerability in weDevs weDocs wedocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects weDocs: from n/a through <= 2.1.18.EPSS0.26%7.2HighCVE-2026-39750wedevs · storegrowth: smart sales booster for woocommerce | bogo, upsells, direct checkout, quick view, side cart +1 moreWordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerabilityUnauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.0.6 versions.EPSS0.24%5.3MediumCVE-2026-25468wedevs · happy_addons_for_elementor +1 moreWordPress Happy Addons for Elementor plugin <= 3.20.8 - Sensitive Data Exposure vulnerabilityExposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for Elementor allows Retrieve Embedded Sensitive Data. This issue affects Happy Addons for Elementor: from n/a through 3.20.8.EPSS0.33%7.5HighCVE-2026-66466wedevs · storegrowth: smart sales booster for woocommerce | bogo, upsells, direct checkout, quick view, side cart +1 moreWordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.1.1 - Broken Access Control vulnerabilityUnauthenticated Broken Access Control in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.1 versions.EPSS0.35%9.8CriticalCVE-2026-18080wedevs · erp: complete hr, accounting & crm suite built for woocommerce +1 moreERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP AttachmentThe ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 1.17.8 via the save_attachments() function. This is due to missing file extension validation and missing path normalization when CRM Email Connect processes inbound IMAP email attachments. This makes it possible for unauthenticated attackers to send a crafted email to the site's configured inbound mailbox with a forged References header matching the plugin's expected pattern and an attachment filename such as `../helper.php`, causing the cron-based IMAP sync job to write attacker-controlled PHP outside of the .htaccess-protected `crm-attachments` directory and into `wp-content/uploads/`. On configurations where PHP executes in uploads, this can lead to remote code execution. Exploitation requires the CRM module and IMAP Email Connect feature to be enabled and configured.EPSS0.67%