Skip to content
OpenAdvisories

Vendor

Ludwig You

7 known vulnerabilities.

Products

WPMasterToolKit 4 WPMasterToolKit (WPMTK) – All in one plugin 2 QuickWebP – Compress / Optimize Images & Convert WebP | SEO Friendly 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-24388

    WordPress WPMasterToolKit plugin <= 2.14.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPMasterToolKit: from n/a through <= 2.14.0.

    Ludwig You WPMasterToolKit
  • Medium 5.3
    CVE-2025-14166

    WPMasterToolKit (WPMTK) <= 2.13.0 - Authenticated (Contributor+) Code Injection

    The WPMasterToolKit plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 2.13.0. This is due to the plugin allowing Author-level users to create and execute arbitrary PHP code through the Code Snippets feature without…

    Ludwig You WPMasterToolKit (WPMTK) – All in one plugin Web / CMS
  • Medium 4.9
    CVE-2024-56248

    WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Download vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Path Traversal.This issue affects WPMasterToolKit: from n/a through <= 1.13.1.

    Ludwig You WPMasterToolKit