WE
Vendor
webfactory
27
CVEs
0
On KEV
2
New 30D
Products
AG8.8
Advanced Google reCAPTCHA
webfactory
6 CVEs0 on KEV1 new
LL4.8
Login Lockdown
WebFactory
1 CVEs0 on KEV1 new
LL5.4
Login Lockdown & Protection
webfactory
3 CVEs0 on KEV0 new
WR5.9
WP Reset
webfactory
3 CVEs0 on KEV0 new
CC5.3
Captcha Code
WebFactory
2 CVEs0 on KEV0 new
EL8.1
Email Log
webfactory
2 CVEs0 on KEV0 new
MC5.4
Minimal Coming Soon – Coming Soon Page
webfactory
2 CVEs0 on KEV0 new
OE7.5
Order Export for WooCommerce
webfactory
2 CVEs0 on KEV0 new
AB6.1
AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o
webfactory
1 CVEs0 on KEV0 new
AW9.1
AiBud WP
WebFactory
1 CVEs0 on KEV0 new
DR4.7
Database Reset
webfactory
1 CVEs0 on KEV0 new
UC6.5
Under Construction Page (Pro)
WebFactory
1 CVEs0 on KEV0 new
WC5.4
WordPress Charts
webfactory
1 CVEs0 on KEV0 new
WF4.3
WP Force SSL & HTTPS SSL Redirect
webfactory
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-100518 | AG Advanced Google reCAPTCHA WebFactory | 5.3 | Oct 6 | WordPress Advanced Google reCAPTCHA plugin <= 5.40 - Broken Authentication vulnerability |
| CVE-2026-97308 | LL Login Lockdown WebFactory | 4.8 | Oct 6 | WordPress Login Lockdown plugin <= 2.17 - Bypass Vulnerability vulnerability |
| CVE-2026-94457 | CC Captcha Code WebFactory | 4.8 | Sep 23 | WordPress Captcha Code plugin <= 3.32 - Bypass Vulnerability vulnerability |
| CVE-2026-94174 | EL Email Log WebFactory | 7.6 | Sep 23 | WordPress Email Log plugin <= 2.63 - SQL Injection vulnerability |
| CVE-2026-11426 | UC Under Construction Page (Pro) WebFactory | 6.5 | Jul 11 | UnderConstructionPage PRO <= 5.76 - Authenticated (Subscriber+) Arbitrary File Read via template_thumbnail Parameter |
| CVE-2026-5411 | AG Advanced Google reCAPTCHA webfactory | 8.8 | Jun 5 | WP Captcha PRO <= 5.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload |
| CVE-2026-5415 | AG Advanced Google reCAPTCHA webfactory | 8.8 | Jun 5 | WP Captcha PRO <= 5.38 - Authenticated (Subscriber+) Authentication Bypass via Temporary Login Link |
| CVE-2024-13362 | AB AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o webfactory | 6.1 | May 1 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter |
| CVE-2025-11707 | LL Login Lockdown & Protection webfactory | 5.3 | Dec 13 | Login Lockdown & Protection <= 2.14 - IP Block Bypass |
| CVE-2025-10645 | WR WP Reset webfactory | 5.3 | Oct 7 | WP Reset <= 2.05 - Unauthenticated Sensitive Information Exposure via wf-licensing.log |
| CVE-2025-23968 | AW AiBud WP WebFactory | 9.1 | Jul 3 | WordPress AiBud WP plugin <= 1.9 - Arbitrary File Upload vulnerability |
| CVE-2025-3766 | LL Login Lockdown & Protection webfactory | 5.4 | May 7 | Login Lockdown & Protection <= 2.11 - Missing Authorization to Authenticated (Subscriber+) Arbitrary IP Whitelisting |
| CVE-2025-2074 | AG Advanced Google reCAPTCHA webfactory | 5.3 | Mar 28 | Advanced Google reCAPTCHA <= 1.29 - Authenticated (Subscriber+) Limited SQL Injection via 'sSearch' Parameter |
| CVE-2025-1262 | AG Advanced Google reCAPTCHA webfactory | 5.3 | Feb 25 | Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA Bypass |
| CVE-2024-13623 | OE Order Export for WooCommerce webfactory | 5.9 | Jan 31 | Order Export for WooCommerce <= 3.24 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory |
| CVE-2024-12034 | AG Advanced Google reCAPTCHA webfactory | 5.3 | Dec 24 | Advanced Google reCAPTCHA <= 1.25 - Brute Force Protection IP Unblock |
| CVE-2024-43259 | OE Order Export for WooCommerce WebFactory | 7.5 | Aug 26 | WordPress Order Export for WooCommerce plugin <= 3.23 - Sensitive Data Exposure vulnerability |
| CVE-2024-5087 | MC Minimal Coming Soon – Coming Soon Page webfactory | 5.4 | Jun 8 | Minimal Coming Soon – Coming Soon Page <= 2.38 - Missing Authorization to Limited Settings Change |
| CVE-2024-4661 | WR WP Reset webfactory | 4.3 | Jun 8 | WP Reset <= 2.02 - Missing Authorization to License Key Modification |
| CVE-2024-5770 | WF WP Force SSL & HTTPS SSL Redirect webfactory | 4.3 | Jun 8 | WP Force SSL & HTTPS SSL Redirect <= 1.66 - Missing Authorization to Settings Update |
| CVE-2023-48745 | CC Captcha Code Webfactory | 5.3 | Jun 4 | WordPress Captcha Code plugin <= 2.9 - Captcha Bypass vulnerability |
| CVE-2024-0867 | EL Email Log webfactory | 8.1 | May 24 | Email Log <= 2.4.8 - Unauthenticated Hook Injection |
| CVE-2023-6799 | WR WP Reset webfactory | 5.9 | Apr 9 | WP Reset <= 2.0 - Sensitive Information Exposure due to Insufficient Randomness |
| CVE-2024-1501 | DR Database Reset webfactory | 4.7 | Feb 21 | Database Reset <= 3.22 - Cross-Site Request Forgery to WP Reset Plugin Installation |
| CVE-2024-1340 | LL Login Lockdown & Protection webfactory | 5.4 | Feb 20 | Login Lockdown – Protect Login Form <= 2.08 - Missing Authorization |
| CVE-2024-1075 | MC Minimal Coming Soon – Coming Soon Page webfactory | 5.3 | Feb 5 | Minimal Coming Soon – Coming Soon Page <= 2.37 - Unauthenticated Maintenance Mode Bypass |
| CVE-2023-5062 | WC WordPress Charts webfactory | 5.4 | Sep 20 | WordPress Charts <= 0.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |