Skip to content
OpenAdvisories

Vendor

madalin.ungureanu

2 known vulnerabilities.

Products

Custom Post Types and Custom Fields creator – WCK 1 Client Portal 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-125745

    WCK before 2.4.1 Missing Authorization via wck_show_update_form AJAX

    Custom Post Types and Custom Fields creator (WCK) before 2.4.1 contains a missing authorization vulnerability that allows authenticated attackers with access to any WCK meta box to read custom-field values on posts they cannot edit by exploiting the wck_show_…

    madalin.ungureanu Custom Post Types and Custom Fields creator – WCK
  • Medium 4.3
    CVE-2026-25003

    WordPress Client Portal plugin <= 1.2.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in madalin.ungureanu Client Portal client-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Portal: from n/a through <= 1.2.1.

    madalin.ungureanu Client Portal