Login Request a demo
WE
Vendor
Webfactoryltd
14 products with CVEs on record
27
CVEs
0
On KEV
0
New 30D
Products
MC
Minimal Coming Soon & Maintenance Mode
Webfactoryltd
8.8
5 CVEs0 on KEV0 new
WD
WP Database Reset
Webfactoryltd
9.1
3 CVEs0 on KEV0 new
WR
WP Reset
Webfactoryltd
5.9
3 CVEs0 on KEV0 new
3R
301 Redirects
Webfactoryltd
9.0
2 CVEs0 on KEV0 new
EL
External Links IN New Window / New Tab
Webfactoryltd
6.5
2 CVEs0 on KEV0 new
UC
Under Construction
Webfactoryltd
4.3
2 CVEs0 on KEV0 new
WL
WP Login Lockdown
Webfactoryltd
7.2
2 CVEs0 on KEV0 new
WR
WP Reset Pro
Webfactoryltd
8.8
2 CVEs0 on KEV0 new
AG
Advanced Google Recaptcha
Webfactoryltd
5.3
1 CVEs0 on KEV0 new
GA
Guest Author
Webfactoryltd
5.4
1 CVEs0 on KEV0 new
MA
Maintenance
Webfactoryltd
4.8
1 CVEs0 on KEV0 new
MW
Maps Widget For Google Maps
Webfactoryltd
4.8
1 CVEs0 on KEV0 new
SA
Simple Author Box
Webfactoryltd
4.3
1 CVEs0 on KEV0 new
WF
WP Force Ssl
Webfactoryltd
4.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-1262
AG
Advanced Google Recaptcha
Webfactoryltd
5.3
0%
Feb 25Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA Bypass
CVE-2024-5087
MC
Minimal Coming Soon & Maintenance Mode
Webfactoryltd
5.4
0%
Jun 8Minimal Coming Soon – Coming Soon Page <= 2.38 - Missing Authorization to Limited Settings Change
CVE-2024-4661
WR
WP Reset
Webfactoryltd
4.3
0%
Jun 8WP Reset <= 2.02 - Missing Authorization to License Key Modification
CVE-2024-5770
WF
WP Force Ssl
Webfactoryltd
4.3
0%
Jun 8WP Force SSL & HTTPS SSL Redirect <= 1.66 - Missing Authorization to Settings Update
CVE-2023-6799
WR
WP Reset
Webfactoryltd
5.9
1%
Apr 9WP Reset <= 2.0 - Sensitive Information Exposure due to Insufficient Randomness
CVE-2024-1501
WD
WP Database Reset
Webfactoryltd
4.7
0%
Feb 21Database Reset <= 3.22 - Cross-Site Request Forgery to WP Reset Plugin Installation
CVE-2024-1340
WL
WP Login Lockdown
Webfactoryltd
5.4
0%
Feb 20Login Lockdown – Protect Login Form <= 2.08 - Missing Authorization
CVE-2024-1075
MC
Minimal Coming Soon & Maintenance Mode
Webfactoryltd
5.3
1%
Feb 5Minimal Coming Soon – Coming Soon Page <= 2.37 - Unauthenticated Maintenance Mode Bypass
CVE-2023-50837
WL
WP Login Lockdown
Webfactoryltd
7.2
1%
Dec 29WordPress Login Lockdown Plugin <= 2.06 is vulnerable to SQL Injection
CVE-2023-49747
GA
Guest Author
Webfactoryltd
5.4
0%
Dec 15WordPress Guest Author Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-3601
SA
Simple Author Box
Webfactoryltd
4.3
1%
Aug 14Simple Author Box < 2.52 - Contributor+ Arbitrary User Information Disclosure via IDOR
CVE-2023-0832
UC
Under Construction
Webfactoryltd
4.3
0%
Jun 9Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_install_weglot
CVE-2023-0831
UC
Under Construction
Webfactoryltd
4.3
0%
Jun 9Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_ucp_dismiss_notice
CVE-2023-1913
MW
Maps Widget For Google Maps
Webfactoryltd
4.8
0%
Apr 6Maps Widget for Google Maps <= 4.24 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2022-1583
EL
External Links IN New Window / New Tab
Webfactoryltd
6.5
1%
May 30The External Links in New Window / New Tab WordPress plugin before 1.43 does not ensure window.opener is set to "null" when links to external sites are clicked, which may enable…
CVE-2022-1582
EL
External Links IN New Window / New Tab
Webfactoryltd
6.1
1%
May 30The External Links in New Window / New Tab WordPress plugin before 1.43 does not properly escape URLs it concatenates to onclick event handlers, which makes Stored Cross-Site…
CVE-2021-36909
WR
WP Reset Pro
Webfactoryltd
8.1
2%
Nov 18Authenticated Database Reset vulnerability in WordPress WP Reset PRO Premium plugin (versions <= 5.98) allows any authenticated user to wipe the entire database regardless of…
CVE-2021-36908
WR
WP Reset Pro
Webfactoryltd
8.8
1%
Nov 18Cross-Site Request Forgery (CSRF) vulnerability in WebFactory Ltd
CVE-2021-24533
MA
Maintenance
Webfactoryltd
4.8
1%
Aug 23The Maintenance WordPress plugin before 4.03 does not sanitise or escape some of its settings, allowing high privilege users such as admin to se Cross-Site Scripting payload in…
CVE-2021-24424
WR
WP Reset
Webfactoryltd
5.4
1%
Jul 12The WP Reset – Most Advanced WordPress Reset Tool WordPress plugin before 1.90 did not sanitise or escape its extra_data parameter when creating a snapshot via the admin…
CVE-2021-24142
3R
301 Redirects
Webfactoryltd
7.2
1%
Mar 18Unvaludated input in the 301 Redirects - Easy Redirect Manager WordPress plugin, versions before 2.51, did not sanitise its "Redirect From" column when importing a CSV file,…
CVE-2020-7048
WD
WP Database Reset
Webfactoryltd
9.1
23%
Jan 16The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any table in the database to the initial WordPress set-up state…
CVE-2020-7047
WD
WP Database Reset
Webfactoryltd
8.8
2%
Jan 16The WordPress plugin, WP Database Reset through 3.1, contains a flaw that gave any authenticated user, with minimal permissions, the ability (with a simple…
CVE-2020-6168
MC
Minimal Coming Soon & Maintenance Mode
Webfactoryltd
7.6
2%
Jan 9A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows authenticated users with basic access to enable and disable maintenance-mode settings…
CVE-2020-6166
MC
Minimal Coming Soon & Maintenance Mode
Webfactoryltd
5.4
1%
Jan 9A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.15, allows authenticated users with basic access to export settings and change maintenance-mode…
CVE-2020-6167
MC
Minimal Coming Soon & Maintenance Mode
Webfactoryltd
8.8
1%
Jan 9A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a CSRF attack to enable maintenance mode, inject XSS, modify several important…
CVE-2019-19915
3R
301 Redirects
Webfactoryltd
9.0
1%
Dec 19The "301 Redirects - Easy Redirect Manager" plugin before 2.45 for WordPress allows users (with subscriber or greater access) to modify, delete, or inject redirect rules, and…