Skip to content
OpenAdvisories

Vendor

loopus

15 known vulnerabilities.

Products

WP Cost Estimation & Payment Forms Builder 7 WP Attractive Donations System - Easy Stripe & Paypal donations 3 WP Virtual Assistant 2 WP Attractive Donations System 1 WP Visitors Tracker 1 WP Ultimate Tours Builder 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2019-25295

    WP Cost Estimation < 9.660 - Upload Directory Traversal

    The WP Cost Estimation plugin for WordPress is vulnerable to Upload Directory Traversal in versions before 9.660 via the uploadFormFiles function. This allows attackers to overwrite any file with a whitelisted type on an affected site.

    loopus WP Cost Estimation & Payment Forms Builder Web / CMS
  • Medium 4.3
    CVE-2025-58999

    WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WP_AttractiveDonationsSystem allows Cross Site Request Forgery.This issue affects WP Attractive Donations System - Easy Stripe & Paypal d…

    loopus WP Attractive Donations System - Easy Stripe & Paypal donations
  • Medium 5.3
    CVE-2025-60155

    WordPress WP Virtual Assistant Plugin <= 3.0 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in loopus WP Virtual Assistant VirtualAssistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Virtual Assistant: from n/a through <= 3.0.

    loopus WP Virtual Assistant
  • Medium 4.3
    CVE-2025-31921

    WordPress WP Ultimate Tours Builder plugin <= 1.055 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in loopus WP Ultimate Tours Builder WP_UltimateToursBuilder allows Cross Site Request Forgery.This issue affects WP Ultimate Tours Builder: from n/a through <= 1.055.

    loopus WP Ultimate Tours Builder
  • Medium 6.5
    CVE-2024-32509

    WordPress WP Cost Estimation & Payment Forms Builder plugin <= 10.1.76 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Loopus WP Cost Estimation & Payment Forms Builder.This issue affects WP Cost Estimation & Payment Forms Builder: from n/a through 10.1.76.

    loopus WP Cost Estimation & Payment Forms Builder