Skip to content
OpenAdvisories

Vendor

smub

114 known vulnerabilities.

Products

Easy Digital Downloads – eCommerce Payments and Subscriptions made easy 17 Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery 10 Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More 8 All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic 7 Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More 7 WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More 6 Sydney Toolbox 5 WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More 4 aThemes Addons for Elementor 4 Custom Twitter Feeds – A Tweets Widget or X Feed Widget 4 ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) 4 Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers 3 Smash Balloon Social Photo Feed – Easy Social Feeds Plugin 3 WP Mail Logging 3 Smash Balloon Social Post Feed – Simple Social Feeds for WordPress 3 All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) 3 UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds 3 Contact Form & SMTP Plugin for WordPress by PirateForms 2 Easy WP SMTP – WordPress SMTP and Email Logs: Gmail, Office 365, Outlook, Custom SMTP, and more 2 Feeds for YouTube (YouTube video, channel, and gallery plugin) 2 Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More 2 Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More 2 WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) 1 WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin 1 WP Lightbox 2 1 Slider by Soliloquy – Responsive Image Slider for WordPress 1 PDF Embedder – PDF Viewer & Embed PDF Files for WordPress 1 Transients Manager 1 Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) 1 aThemes Starter Sites 1 Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation 1 WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager 1 Sugar Calendar – Events Calendar, Event Tickets, and Events Management Platform 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 2.7
    CVE-2026-109401

    WP Mail Logging <= 1.17.0 - Authenticated (Administrator+) Sensitive Information Exposure in LIKE Wildcard in Personal Data Export Email

    The WP Mail Logging plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.17.0 via the 'email_address' parameter. This makes it possible for authenticated attackers, with administrator-level access and ab…

    smub WP Mail Logging Web / CMS
  • Low 3.7
    CVE-2024-9654

    Easy Digital Downloads 3.1 - 3.3.4 - Improper Authorization to Paywall Bypass

    The Easy Digital Downloads plugin for WordPress is vulnerable to Improper Authorization in versions 3.1 through 3.3.4. This is due to a lack of sufficient validation checks within the 'verify_guest_email' function to ensure the requesting user is the intended…

    smub Easy Digital Downloads – eCommerce Payments and Subscriptions made easy Web / CMS
  • Low 3.3
    CVE-2024-6692

    Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Agreement Text

    The Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Agreement Text value in all versions up to, and including, 3.3.2 due to insufficie…

    smub Easy Digital Downloads – eCommerce Payments and Subscriptions made easy Web / CMS
  • Low 2.7
    CVE-2024-6694

    WP Mail SMTP <= 4.0.1 - Authenticated (Admin+) SMTP Password Exposure

    The WP Mail SMTP plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 4.0.1. This is due to plugin providing the SMTP password in the SMTP Password field when viewing the settings. This makes it possible for authent…

    smub WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin Web / CMS
  • Low 2.7
    CVE-2024-3073

    Easy WP SMTP by SendLayer <= 2.3.0 - Exposure of Sensitive Information via the UI

    The Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.3.0. This is due to plugin providing the SMTP password in the SMTP Password field when viewi…

    smub Easy WP SMTP – WordPress SMTP and Email Logs: Gmail, Office 365, Outlook, Custom SMTP, and more Web / CMS