Skip to content
OpenAdvisories

Vendor

kamleshyadav

24 known vulnerabilities.

Products

WP Lead Capturing Pages 4 Miraculous 3 Miraculous Core Plugin 3 Pixel WordPress Form BuilderPlugin & Autoresponder 2 WP Bakery Autoresponder Addon 2 Handily 1 Medicalequipment 1 Miraculous Elementor 1 Image Buzz 1 CF7 Auto Responder Addon 1 PixelPlay 1 CF7 7 Mailchimp Add-on 1 Exit Intent Popup 1 Videospirecore Theme Plugin 1 RockON DJ 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-14487

    Handily <= 1.0.3 - Missing Authorization to Unauthenticated Arbitrary Stripe Payment Settings Modification via 'stripe_publishbale_key' Parameter

    The Handily plugin for WordPress is vulnerable to unauthorized payment settings modification due to missing authorization checks in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to modify Stripe payment configu…

    kamleshyadav Handily Web / CMS
  • Medium 5.3
    CVE-2025-14486

    PixelPlay <= 1.0.2 - Missing Authorization to Unauthenticated Arbitrary API Key Deletion via 'clear_api_type' Parameter

    The PixelPlay plugin for WordPress is vulnerable to unauthorized API key deletion due to missing authorization checks in all versions up to, and including, 1.0.2. This makes it possible for unauthenticated attackers to delete arbitrary API keys (Pixabay, Unsp…

    kamleshyadav PixelPlay Web / CMS
  • Medium 5.3
    CVE-2025-14484

    Image Buzz <= 1.0.3 - Missing Authorization to Unauthenticated Arbitrary API Key Modification via 'pixabay_api' Parameter

    The Image Buzz plugin for WordPress is vulnerable to unauthorized API key modification due to missing authorization checks in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to modify arbitrary API keys (Pixabay,…

    kamleshyadav Image Buzz Web / CMS
  • Medium 6.5
    CVE-2026-27362

    WordPress WP Bakery Autoresponder Addon plugin <= 1.0.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in kamleshyadav WP Bakery Autoresponder Addon vc-autoresponder-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Bakery Autoresponder Addon: from n/a through <= 1.0.6.

    kamleshyadav WP Bakery Autoresponder Addon
  • Medium 5.3
    CVE-2025-69009

    WordPress Medicalequipment theme <= 1.0.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in kamleshyadav Medicalequipment medicalequipment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Medicalequipment: from n/a through <= 1.0.9.

    kamleshyadav Medicalequipment
  • Medium 5.4
    CVE-2025-58641

    WordPress Exit Intent Popup Plugin <= 1.0.1 - Server Side Request Forgery (SSRF) Vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in kamleshyadav Exit Intent Popup exitintentpopup allows Server Side Request Forgery.This issue affects Exit Intent Popup: from n/a through <= 1.0.1.

    kamleshyadav Exit Intent Popup
  • Medium 5.3
    CVE-2025-29012

    WordPress CF7 7 Mailchimp Add-on plugin < 2.4 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in kamleshyadav CF7 7 Mailchimp Add-on CF7-mailchimp-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CF7 7 Mailchimp Add-on: from n/a through < 2.4.

    kamleshyadav CF7 7 Mailchimp Add-on
  • Medium 5.4
    CVE-2025-31915

    WordPress Pixel Form BuilderPlugin & Autoresponder plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin & Autoresponder pixel-formbuilder allows Cross Site Request Forgery.This issue affects Pixel WordPress Form BuilderPlugin & Autoresponder: from n/a through <= 1…

    kamleshyadav Pixel WordPress Form BuilderPlugin & Autoresponder Web / CMS