Vendor
smub
114 known vulnerabilities.
Products
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy 17
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery 10
Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More 8
All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic 7
Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More 7
WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More 6
Sydney Toolbox 5
WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More 4
aThemes Addons for Elementor 4
Custom Twitter Feeds – A Tweets Widget or X Feed Widget 4
ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) 4
Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers 3
Smash Balloon Social Photo Feed – Easy Social Feeds Plugin 3
WP Mail Logging 3
Smash Balloon Social Post Feed – Simple Social Feeds for WordPress 3
All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) 3
UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds 3
Contact Form & SMTP Plugin for WordPress by PirateForms 2
Easy WP SMTP – WordPress SMTP and Email Logs: Gmail, Office 365, Outlook, Custom SMTP, and more 2
Feeds for YouTube (YouTube video, channel, and gallery plugin) 2
Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More 2
Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More 2
WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) 1
WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin 1
WP Lightbox 2 1
Slider by Soliloquy – Responsive Image Slider for WordPress 1
PDF Embedder – PDF Viewer & Embed PDF Files for WordPress 1
Transients Manager 1
Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) 1
aThemes Starter Sites 1
Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation 1
WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager 1
Sugar Calendar – Events Calendar, Event Tickets, and Events Management Platform 1
1 result · Clear filters · Feed
-
High 8.8CVE-2026-8832 Public exploit
WPCode <= 2.3.5 - Authenticated (Author+) Remote Code Execution via CPT Capability Bypass via XML-RPC wp.newPost
The WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.3.5 This is due to the 'wpcode' custom post type being registered without a…