Skip to content
OpenAdvisories

Vendor

Ludwig You

7 known vulnerabilities.

Products

WPMasterToolKit 4 WPMasterToolKit (WPMTK) – All in one plugin 2 QuickWebP – Compress / Optimize Images & Convert WebP | SEO Friendly 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.6
    CVE-2026-66624

    WordPress WPMasterToolKit plugin <= 2.22.0 - SQL Injection vulnerability

    Administrator SQL Injection in WPMasterToolKit <= 2.22.0 versions.

    Ludwig You WPMasterToolKit
  • High 7.2
    CVE-2025-3300

    WPMasterToolKit (WPMTK) – All in one plugin <= 2.5.2 - Authenticated (Administrator+) to Arbitrary File Read and Write

    The WPMasterToolKit (WPMTK) – All in one plugin plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.5.2. This makes it possible for authenticated attackers, with Administrator-level access and above, to read and m…

    Ludwig You WPMasterToolKit (WPMTK) – All in one plugin Web / CMS