Skip to content
OpenAdvisories

Vendor

Softaculous

48 known vulnerabilities.

Products

Page Builder: Pagelayer – Drag and Drop website builder 14 Backuply – Backup, Restore, Migrate and Clone 6 FileOrganizer – WordPress File Manager 4 SpeedyCache – Cache, Optimization, Performance 4 SiteSEO – SEO Simplified 4 Webuzo 3 Virtualizor 3 Loginizer 3 PageLayer 2 GoSMTP Pro 1 SpeedyCache 1 Kanbanz 1 FormLayer 1 Loginizer Security 1 wpCentral 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-43641

    Softaculous Virtualizor OS Command Injection via Billing Module Handler

    Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains an OS command injection vulnerability in the billing module handler that allows unauthenticated remote attackers to execute arbitrary commands as root by bypassing authentication through specif…

    Softaculous Virtualizor
  • Critical 9.1
    CVE-2024-8669 EPSS 17%

    Backuply – Backup, Restore, Migrate and Clone <= 1.3.4 - Authenticated (Admin+) SQL Injection

    The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the 'options' parameter passed to the backuply_wp_clone_sql() function in all versions up to, and including, 1.3.4 due to insufficient escaping on the us…

    Softaculous Backuply – Backup, Restore, Migrate and Clone Web / CMS
  • Critical 9.8
    CVE-2024-24621

    Softaculous Webuzo Authentication Bypass

    Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, anonymous attackers can exploit this vulnerability to gain full server access as the root user.

    Softaculous Webuzo