Skip to content
OpenAdvisories

Vendor

loopus

15 known vulnerabilities.

Products

WP Cost Estimation & Payment Forms Builder 7 WP Attractive Donations System - Easy Stripe & Paypal donations 3 WP Virtual Assistant 2 WP Attractive Donations System 1 WP Visitors Tracker 1 WP Ultimate Tours Builder 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-28115

    WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WP_AttractiveDonationsSystem allows Blind SQL Injection.This issue affects WP Attracti…

    loopus WP Attractive Donations System - Easy Stripe & Paypal donations
  • Critical 9.8
    CVE-2019-25296

    WP Cost Estimation <= 9.642 - Missing Authorization to Arbitrary File Upload/Delete

    The WP Cost Estimation plugin for WordPress is vulnerable to arbitrary file uploads and deletion due to missing file type validation in the lfb_upload_form and lfb_removeFile AJAX actions in versions up to, and including, 9.642. This makes it possible for una…

    loopus WP Cost Estimation & Payment Forms Builder Web / CMS