Login Request a demo
SA
Vendor
saadiqbal
17 products with CVEs on record
42
CVEs
0
On KEV
3
New 30D
Products
PS
Post Snippets – Custom WordPress Code Snippets Customizer
saadiqbal
6.4
2 CVEs0 on KEV1 new
PP
Password Protected – Protect Your Site Content With a Password
saadiqbal
6.4
1 CVEs0 on KEV1 new
PS
Post SMTP – Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
saadiqbal
7.2
1 CVEs0 on KEV1 new
PM
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
saadiqbal
6.4
8 CVEs0 on KEV0 new
AF
Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution
saadiqbal
8.8
7 CVEs0 on KEV0 new
PS
Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
saadiqbal
9.8
7 CVEs0 on KEV0 new
WE
WP Easy Pay – Payment and Donation form Builder for Square
saadiqbal
6.5
3 CVEs0 on KEV0 new
GF
Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder
saadiqbal
6.5
2 CVEs0 on KEV0 new
NU
New User Approve
saadiqbal
7.3
2 CVEs0 on KEV0 new
PP
Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content
saadiqbal
5.3
2 CVEs0 on KEV0 new
AF
Advanced File Manager — Ultimate WordPress File Manager and Document Library Plugin
saadiqbal
7.5
1 CVEs0 on KEV0 new
QC
Quick Contact Form
saadiqbal
5.8
1 CVEs0 on KEV0 new
UM
User Management
saadiqbal
5.3
1 CVEs0 on KEV0 new
WS
WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce
saadiqbal
6.3
1 CVEs0 on KEV0 new
WF
Wholesale for WooCommerce
saadiqbal
8.8
1 CVEs0 on KEV0 new
WS
WPExperts Square For GiveWP
saadiqbal
6.5
1 CVEs0 on KEV0 new
WS
WPFormify – Stripe Payments with Form and Checkout
saadiqbal
8.2
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-93293
New
PP
Password Protected – Protect Your Site Content With a Password
saadiqbal
6.4–Oct 29Password Protected <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Freemius purchase_completed Handler
CVE-2026-77871
New
PS
Post Snippets – Custom WordPress Code Snippets Customizer
saadiqbal
6.4
0%
Oct 28Post Snippets <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2026-75962
PS
Post SMTP – Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
saadiqbal
7.2
0%
Oct 6Post SMTP <= 4.0.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user_email' Parameter (Multisite Registration → Failed Email Log)
CVE-2026-12739
WE
WP Easy Pay – Payment and Donation Form Builder for Square
saadiqbal
4.3
0%
Sep 18WP Easy Pay <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
CVE-2026-17149
PM
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
saadiqbal
6.4
0%
Sep 9myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute
CVE-2026-15009
AF
Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution
saadiqbal
6.1
0%
Aug 16Advanced File Manager <= 5.4.12 - Reflected Cross-Site Scripting via postMessage 'soundFile' Parameter
CVE-2026-6627
WS
WPFormify – Stripe Payments with Form and Checkout
saadiqbal
8.2
1%
Aug 5WPFormify <= 1.1.1 - Missing Authorization
CVE-2026-11995
GF
Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder
saadiqbal
5.3
1%
Aug 1Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 - Missing Authorization to Unauthenticated Arbitrary Form Entry Modification/Trash via process_bulk_action()
CVE-2026-12144
WF
Wholesale for WooCommerce
saadiqbal
8.8
1%
Jul 29Wholesale for WooCommerce <= 2.0.5 - Authenticated (Author+) Privilege Escalation via 'user_role_set' Parameter
CVE-2026-12738
WE
WP Easy Pay – Payment and Donation form Builder for Square
saadiqbal
4.3
0%
Jul 11WP Easy Pay <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Status Modification via wpep_draft_confirm AJAX Action
CVE-2026-12097
UM
User Management
saadiqbal
5.3
0%
Jul 8User Management <= 1.2 - Missing Authorization to Unauthenticated Plugin Settings Modification
CVE-2026-8607
PM
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
saadiqbal
6.4
0%
Jun 17myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrap' Shortcode Attribute
CVE-2026-7430
PS
Post Snippets – Custom WordPress Code Snippets Customizer
saadiqbal
4.4
0%
May 29Post Snippets <= 4.0.19 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import
CVE-2026-3090
PS
Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
saadiqbal
7.2
0%
Mar 18Post SMTP <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting via 'event_type'
CVE-2026-2559
PS
Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
saadiqbal
5.3
0%
Mar 18Post SMTP <= 3.8.0 - Missing Authorization to Authenticated (Subscriber+) Office 365 OAuth Configuration Overwrite
CVE-2026-1674
GF
Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder
saadiqbal
6.5
0%
Mar 4Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.6.0 - Authenticated (Contributor+) Limited Options Update in save_gutena_forms_schema()
CVE-2026-0550
PM
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
saadiqbal
6.4
0%
Feb 14myCred <= 2.9.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mycred_load_coupon' Shortcode
CVE-2026-0832
NU
New User Approve
saadiqbal
7.3
0%
Jan 28New User Approve <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary User Approval, Denial, and Information Disclosure
CVE-2025-12718
QC
Quick Contact Form
saadiqbal
5.8
0%
Jan 17Quick Contact Form <= 8.2.6 - Unauthenticated Open Mail Relay
CVE-2025-12361
PM
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
saadiqbal
4.3
0%
Dec 19myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7.1 - Missing Authorization to Sensitive Information Exposure
CVE-2025-12362
PM
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
saadiqbal
5.3
0%
Dec 13myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7 - Missing Authorization to Unauthenticated Withdrawal Request Approval
CVE-2025-12887
PS
Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
saadiqbal
5.4
0%
Dec 3Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App <= 3.6.1 - Missing Authorization to Authenticated (Subscriber+) OAuth Token Update
CVE-2025-12770
NU
New User Approve
saadiqbal
5.3
0%
Nov 19New User Approve <= 3.0.9 - Unauthenticated Sensitive Information Disclosure via Type Juggling
CVE-2025-11833
PS
Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
saadiqbal
9.8
61%
Nov 1Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App <= 3.6.0 - Missing Authorization to Account Takeover via Unauthenticated Email Log Disclosure
CVE-2025-11244
PP
Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content
saadiqbal
3.7
0%
Oct 25Password Protected <= 2.7.11 - Unauthenticated Authorization Bypass via IP Address Spoofing
CVE-2025-9219
PS
Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
saadiqbal
4.3
0%
Sep 3Post SMTP <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Option Update
CVE-2025-0818
AF
Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution
saadiqbal
6.5
1%
Aug 13Multiple elFinder Plugins <= (Various Versions) - Directory Traversal to Arbitrary File Deletion
CVE-2025-3453
PP
Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content
saadiqbal
5.3
0%
Apr 17Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products <= 2.7.7 - Unauthenticated Sensitive Information Exposure
CVE-2024-13844
PS
Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
saadiqbal
4.9
0%
Mar 8Post SMTP <= 3.1.2 - Authenticated (Administrator+) SQL Injection via columns Parameter
CVE-2024-13805
AF
Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution
saadiqbal
5.4
0%
Mar 7Advanced File Manager <= 5.2.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-13713
WS
WPExperts Square For GiveWP
saadiqbal
6.5
0%
Feb 21WPExperts Square For GiveWP <= 1.3.1 - Authenticated (Subscriber+) SQL Injection
CVE-2025-0521
PS
Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
saadiqbal
6.1
0%
Feb 18Post SMTP <= 3.0.2 - Unauthenticated Stored Cross-Site Scripting
CVE-2024-13333
AF
Advanced File Manager — Ultimate WordPress File Manager and Document Library Plugin
saadiqbal
7.5
1%
Jan 17Advanced File Manager 5.2.12 - 5.2.13 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2024-11201
PM
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
saadiqbal
6.4
1%
Dec 6myCred – Loyalty Points and Rewards plugin <= 2.7.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_send Shortcode
CVE-2024-11391
AF
Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution
saadiqbal
7.5
1%
Dec 3Advanced File Manager <= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2024-10187
PM
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
saadiqbal
5.4
0%
Nov 8myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode
CVE-2022-4974
WS
WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce
saadiqbal
6.3
0%
Oct 16Freemius SDK <= 2.4.2 - Missing Authorization Checks
CVE-2024-8725
AF
Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution
saadiqbal
5.4
0%
Sep 26Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Upload
CVE-2024-8126
AF
Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution
saadiqbal
8.8
1%
Sep 26Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2024-8704
AF
Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution
saadiqbal
7.2
1%
Sep 26Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale
CVE-2024-8658
PM
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
saadiqbal
5.3
0%
Sep 25myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification <= 2.7.3 - Missing Authorization to Unauthenticated Database Upgrade
CVE-2024-5861
WE
WP Easy Pay – Payment and Donation form Builder for Square
saadiqbal
6.5
0%
Jul 24WP Easy Pay (Free) <= 4.2.3 - Missing Authorization to Unauthenticated Service Disconnection