Login Request a demo
WP
Vendor
WPExperts
24 products with CVEs on record
60
CVEs
0
On KEV
6
New 30D
Products
AS
APIExperts Square for WooCommerce
WPExperts
5.3
3 CVEs0 on KEV3 new
AF
Advanced File Manager
WPExperts
6.5
1 CVEs0 on KEV1 new
CA
CF7 Apps
WPExperts
5.3
1 CVEs0 on KEV1 new
WE
WP EasyPay
WPExperts
5.3
1 CVEs0 on KEV1 new
PS
Post SMTP
WPExperts
9.8
21 CVEs0 on KEV0 new
MY
Mycred
Wpexperts
8.8
7 CVEs0 on KEV0 new
WM
WP Multi Store Locator
Wpexperts
6.1
3 CVEs0 on KEV0 new
AI
All IN One Login
Wpexperts
7.5
2 CVEs0 on KEV0 new
LM
License Manager For Woocommerce
Wpexperts
7.2
2 CVEs0 on KEV0 new
NU
New User Approve
Wpexperts
8.8
2 CVEs0 on KEV0 new
PP
Password Protected
Wpexperts
4.8
2 CVEs0 on KEV0 new
WF
Wholesale For WooCommerce
WPExperts
5.3
2 CVEs0 on KEV0 new
WC
WP Contact Slider
Wpexperts
4.8
2 CVEs0 on KEV0 new
ET
Email Templates
Wpexperts
8.8
1 CVEs0 on KEV0 new
ET
Email Templates Customizer And Designer
Wpexperts
8.8
1 CVEs0 on KEV0 new
GS
Givewp Square
Wpexperts
6.5
1 CVEs0 on KEV0 new
GF
Gravity Forms Bookings premium
WPExperts
8.5
1 CVEs0 on KEV0 new
PS
Post Smtp Mailer
Wpexperts
9.8
1 CVEs0 on KEV0 new
RM
Rocket Maintenance Mode & Coming Soon Page
Wpexperts
4.8
1 CVEs0 on KEV0 new
UA
User Avatar-reloaded
Wpexperts
5.4
1 CVEs0 on KEV0 new
UM
User Management
Wpexperts
9.9
1 CVEs0 on KEV0 new
WS
WC Shop Sync
Wpexperts
6.1
1 CVEs0 on KEV0 new
WP
WP Pdf Generator
Wpexperts
8.8
1 CVEs0 on KEV0 new
WS
WP Secure Maintenance
Wpexperts
4.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-115959
New
AS
APIExperts Square for WooCommerce
WPExperts
5.3
0%
Oct 26WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability
CVE-2026-115960
New
AS
APIExperts Square for WooCommerce
WPExperts
4.3
0%
Oct 26WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability
CVE-2026-110365
AF
Advanced File Manager
WPExperts
6.5
0%
Oct 18WordPress Advanced File Manager plugin <= 5.4.14 - Broken Access Control vulnerability
CVE-2026-96449
WE
WP EasyPay
WPExperts
5.3
0%
Oct 15WordPress WP EasyPay plugin <= 4.5.4 - Broken Access Control vulnerability
CVE-2026-110367
AS
APIExperts Square for WooCommerce
WPExperts
5.3
0%
Oct 15WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability
CVE-2026-62058
CA
CF7 Apps
WPExperts
5.3
0%
Oct 1WordPress CF7 Apps plugin <= 3.7.2 - Sensitive Data Exposure vulnerability
CVE-2026-81278
PS
Post SMTP
WPExperts
5.4
0%
Aug 31WordPress Post SMTP plugin 4.0.0-beta.1 - Settings Change vulnerability
CVE-2026-32466
GF
Gravity Forms Bookings premium
WPExperts
8.5
0%
Aug 18WordPress Gravity Forms Bookings premium plugin <= 2.1 - SQL Injection vulnerability
CVE-2026-48838
PS
Post SMTP
WPExperts
7.1
0%
Jun 15WordPress Post SMTP plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability
CVE-2024-13844
PS
Post Smtp
Wpexperts
4.9
0%
Mar 8Post SMTP <= 3.1.2 - Authenticated (Administrator+) SQL Injection via columns Parameter
CVE-2024-13713
GS
Givewp Square
Wpexperts
6.5
0%
Feb 21WPExperts Square For GiveWP <= 1.3.1 - Authenticated (Subscriber+) SQL Injection
CVE-2025-0521
PS
Post Smtp
Wpexperts
6.1
0%
Feb 18Post SMTP <= 3.0.2 - Unauthenticated Stored Cross-Site Scripting
CVE-2025-24680
WM
WP Multi Store Locator
Wpexperts
6.1
0%
Jan 27WordPress WP Multi Store Locator Plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-22800
PS
Post Smtp
Wpexperts
8.8
0%
Jan 13WordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerability
CVE-2024-12475
WM
WP Multi Store Locator
Wpexperts
5.4
0%
Jan 4WP Multi Store Locator <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-52436
PS
Post Smtp
Wpexperts
7.2
0%
Nov 18WordPress Post SMTP plugin <= 2.9.9 - SQL Injection vulnerability
CVE-2024-52403
UM
User Management
Wpexperts
9.9
0%
Nov 16WordPress User Management plugin <= 1.1 - Arbitrary File Upload vulnerability
CVE-2024-43214
MY
Mycred
Wpexperts
5.3
0%
Aug 26WordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerability
CVE-2024-4753
WS
WP Secure Maintenance
Wpexperts
4.8
0%
Jul 12WP Secure Maintenance < 1.7 - Admin+ Stored XSS
CVE-2024-1639
LM
License Manager For Woocommerce
Wpexperts
6.5
0%
Jun 21License Manager for WooCommerce <= 3.0.6 - Improper Authorization to Authenticated(Contributor+) Sensitive Information Exposure
CVE-2023-52233
PS
Post Smtp
Wpexperts
9.8
0%
Jun 11WordPress POST SMTP Mailer plugin <= 2.8.6 - Broken Access Control on API vulnerability
CVE-2024-5207
PS
Post Smtp
Wpexperts
7.2
0%
May 30POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.9.3 - Authenticated (Administrator+) SQL Injection
CVE-2024-31297
WF
Wholesale For WooCommerce
WPExperts
5.3
0%
Apr 10WordPress Wholesale For WooCommerce plugin <= 2.3.1 - Unauthenticated Arbitrary Post/Page vulnerability
CVE-2024-30469
WF
Wholesale For WooCommerce
WPExperts
5.3
0%
Mar 29WordPress Wholesale For WooCommerce plugin <= 2.3.0 - Unauthenticated Sensitive Data Exposure vulnerability
CVE-2024-29128
PS
Post Smtp
Wpexperts
6.1
0%
Mar 19WordPress POST SMTP Mailer plugin <= 2.8.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-27959
WS
WC Shop Sync
Wpexperts
6.1
0%
Mar 17WordPress APIExperts Square for WooCommerce plugin <= 4.2.9 - Cross Site Scripting (XSS) vulnerability
CVE-2024-0656
PP
Password Protected
Wpexperts
4.8
0%
Feb 20Password Protected <= 2.6.6 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2023-3178
PS
Post Smtp
Wpexperts
4.3
0%
Jan 16POST SMTP Mailer < 2.5.7 - Arbitrary Log Deletion via CSRF
CVE-2023-6620
PS
Post Smtp
Wpexperts
7.2
14%
Jan 15Post SMTP < 2.8.7 - Admin+ SQL Injection
CVE-2023-6875
PS
Post Smtp
Wpexperts
9.8
90%
Jan 11POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Authorization Bypass via type connect-app API
CVE-2023-6621
PS
Post Smtp
Wpexperts
6.1
0%
Jan 3Post SMTP < 2.8.7 - Reflected Cross-Site Scripting
CVE-2023-7027
PS
Post Smtp
Wpexperts
5.4
1%
Jan 3POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Unauthenticated Stored Cross-Site Scripting via device
CVE-2023-6629
PS
Post Smtp
Wpexperts
6.1
0%
Jan 3POST SMTP Mailer <= 2.8.6 - Reflected Cross-Site Scripting via msg
CVE-2023-50902
NU
New User Approve
Wpexperts
8.8
0%
Dec 29WordPress New User Approve Plugin <= 2.5.1 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-49842
RM
Rocket Maintenance Mode & Coming Soon Page
Wpexperts
4.8
0%
Dec 14WordPress Rocket Maintenance Mode & Coming Soon Page Plugin <= 4.3 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-47853
MY
Mycred
Wpexperts
5.4
0%
Nov 30WordPress myCred Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-48742
LM
License Manager For Woocommerce
Wpexperts
7.2
1%
Nov 30WordPress License Manager for WooCommerce Plugin <= 2.2.10 is vulnerable to SQL Injection
CVE-2023-5958
PS
Post Smtp
Wpexperts
6.1
1%
Nov 27POST SMTP Mailer < 2.7.1 - Unauthenticated Cross-site Scripting
CVE-2022-47181
ET
Email Templates Customizer And Designer
Wpexperts
8.8
0%
Nov 7WordPress Email Templates Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-4798
UA
User Avatar-reloaded
Wpexperts
5.4
0%
Oct 16The User Avatar WordPress plugin before 1.2.2 does not properly sanitize and escape certain of its shortcodes attributes, which could allow relatively low-privileged users like…
CVE-2023-3604
AI
All IN One Login
Wpexperts
7.5
1%
Aug 21The Change WP Admin Login WordPress plugin before 1.1.4 discloses the URL of the hidden login page when accessing a crafted URL, bypassing the protection offered
CVE-2023-3179
PS
Post Smtp
Wpexperts
8.8
0%
Jul 17The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the…
CVE-2023-35096
MY
Mycred
Wpexperts
8.8
0%
Jul 17Cross-Site Request Forgery (CSRF) vulnerability in myCred plugin <= 2.5 versions
CVE-2023-35038
WP
WP Pdf Generator
Wpexperts
8.8
0%
Jul 17Cross-Site Request Forgery (CSRF) vulnerability in wpexperts.Io WP PDF Generator plugin <= 1.2.2 versions
CVE-2021-4422
PS
Post Smtp
Wpexperts
4.3
1%
Jul 12The POST SMTP Mailer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.20
CVE-2023-3082
PS
Post Smtp
Wpexperts
6.1
0%
Jul 12The Post SMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 2.5.7 due to insufficient input sanitization…
CVE-2023-32580
PP
Password Protected
Wpexperts
4.8
0%
Jun 23Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPExperts Password Protected plugin <= 2.6.2 versions
CVE-2019-25150
ET
Email Templates
Wpexperts
8.8
1%
Jun 7The Email Templates plugin for WordPress is vulnerable to HTML Injection in versions up to, and including, 1.3
CVE-2023-0152
WM
WP Multi Store Locator
Wpexperts
5.4
0%
Jun 5The WP Multi Store Locator WordPress plugin through 2.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the…
CVE-2022-3237
WC
WP Contact Slider
Wpexperts
4.8
1%
Oct 31WP Contact Slider < 2.4.8 - Admin+ Stored Cross-Site Scripting
CVE-2022-2352
PS
Post Smtp
Wpexperts
7.2
1%
Sep 26The Post SMTP Mailer/Email Log WordPress plugin before 2.1.7 does not have proper authorisation in some AJAX actions, which could allow high privilege users such as admin to…
CVE-2022-2351
PS
Post Smtp
Wpexperts
4.8
1%
Sep 16The Post SMTP Mailer/Email Log WordPress plugin before 2.1.4 does not escape some of its settings before outputting them in the admins dashboard, allowing high privilege users to…
CVE-2022-1301
WC
WP Contact Slider
Wpexperts
4.8
1%
Jul 4The WP Contact Slider WordPress plugin before 2.4.7 does not sanitize and escape the Text to Display settings of sliders, which could allow high privileged users such as editor…
CVE-2022-1625
NU
New User Approve
Wpexperts
4.3
0%
Jun 27The New User Approve WordPress plugin before 2.4 does not have CSRF check in place when updating its settings and adding invitation codes, which could allow attackers to add…
CVE-2022-1589
AI
All IN One Login
Wpexperts
7.5
1%
May 30The Change wp-admin login WordPress plugin before 1.1.0 does not properly check for authorisation and is also missing CSRF check when updating its settings, which could allow…
CVE-2022-1092
MY
Mycred
Wpexperts
4.3
0%
Apr 25The myCred WordPress plugin before 2.4.3.1 does not have authorisation and CSRF checks in its mycred-tools-import-export AJAX action, allowing any authenticated user to call and…
CVE-2022-0363
MY
Mycred
Wpexperts
4.3
0%
Apr 25The myCred WordPress plugin before 2.4.3.1 does not have any authorisation and CSRF checks in the mycred-tools-import-export AJAX action, allowing any authenticated users, such as…
CVE-2022-0287
MY
Mycred
Wpexperts
4.3
1%
Apr 25The myCred WordPress plugin before 2.4.4.1 does not have any authorisation in place in its mycred-tools-select-user AJAX action, allowing any authenticated user, such as…
CVE-2021-24755
MY
Mycred
Wpexperts
8.8
1%
Nov 29The myCred WordPress plugin before 2.3 does not validate or escape the fields parameter before using it in a SQL statement, leading to an SQL injection exploitable by any…