Skip to content
OpenAdvisories

Vendor

Saad Iqbal

106 known vulnerabilities.

Products

Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App 13 myCred 11 Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution 8 Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred 8 WP EasyPay 6 New User Approve 6 License Manager for WooCommerce 5 WP Easy Pay – Payment and Donation Form Builder for Square 4 Post SMTP 4 Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content 4 User Management 3 AppExperts 3 APIExperts Square for WooCommerce 3 Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder 3 Quick Contact Form 3 Email Templates Customizer and Designer for WordPress and WooCommerce 2 Post Snippets 2 WPExperts Square For GiveWP 2 All In One Login 2 Post Snippets – Custom WordPress Code Snippets Customizer 2 Bookify 1 WPFormify – Stripe Payments with Form and Checkout 1 Advanced File Manager 1 User Avatar - Reloaded 1 Wholesale for WooCommerce 1 Advanced File Manager — Ultimate WordPress File Manager and Document Library Plugin 1 Gutena Kit – Gutenberg Blocks and Templates 1 Post SMTP – Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App 1 myCred Elementor 1 WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce 1 CF7 Apps – Addons for Contact Form 7 (Honeypot, Database, Redirection, Webhook, etc.) 1 Password Protected – Protect Your Site Content With a Password 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-11833 Public exploit Scanner template EPSS 61%

    Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App <= 3.6.0 - Missing Authorization to Account Takeover via Unauthenticated Email Log Disclosure

    The Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the __construct function in all versions up to, and including, 3.6.0. Thi…

    Saad Iqbal Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App Web / CMS
  • Critical 9.9
    CVE-2024-52403

    WordPress User Management plugin <= 1.1 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Saad Iqbal User Management user-management allows Upload a Web Shell to a Web Server.This issue affects User Management: from n/a through <= 1.1.

    Saad Iqbal User Management
  • Critical 9.8
    CVE-2024-43354

    WordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through <= 2.7.2.

    Saad Iqbal myCred
  • Critical 9.8
    CVE-2023-6875 Public exploit Scanner template EPSS 90%

    POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Authorization Bypass via type connect-app API

    The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a type juggling issue on the connect-app REST endpoint in all v…

    Saad Iqbal Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App Web / CMS