Skip to content
OpenAdvisories

Vendor

Softaculous

48 known vulnerabilities.

Products

Page Builder: Pagelayer – Drag and Drop website builder 14 Backuply – Backup, Restore, Migrate and Clone 6 FileOrganizer – WordPress File Manager 4 SpeedyCache – Cache, Optimization, Performance 4 SiteSEO – SEO Simplified 4 Webuzo 3 Virtualizor 3 Loginizer 3 PageLayer 2 GoSMTP Pro 1 SpeedyCache 1 Kanbanz 1 FormLayer 1 Loginizer Security 1 wpCentral 1
All Critical High Medium Low Exploited only Public exploit

48 results · Feed

  • High 7.5
    CVE-2024-0842

    Backuply - Backup, Restore, Migrate and Clone <= 1.2.6 - Denial of Service

    The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 1.2.6. This is due to direct access of the backuply/restore_ins.php file and. This makes it possible for unauthenti…

    Softaculous Backuply – Backup, Restore, Migrate and Clone Web / CMS
  • Medium 6.5
    CVE-2024-0697

    Backuply – Backup, Restore, Migrate and Clone <= 1.2.3 - Authenticated (Administrator+) Directory Traversal

    The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.3 via the node_id parameter in the backuply_get_jstree function. This makes it possible for attackers with ad…

    Softaculous Backuply – Backup, Restore, Migrate and Clone Web / CMS
  • Medium 4.3
    CVE-2023-6598

    SpeedyCache <= 1.1.3 - Missing Authorization to Plugin Options Update

    The SpeedyCache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the speedycache_save_varniship, speedycache_img_update_settings, speedycache_preloading_add_settings, and speedycache_preloading_delet…

    Softaculous SpeedyCache – Cache, Optimization, Performance Web / CMS
  • Medium 5.4
    CVE-2023-6738

    PageLayer <= 1.7.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via meta fields

    The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pagelayer_header_code', 'pagelayer_body_open_code', and 'pagelayer_footer_code' meta fields in all versions up to, and inclu…

    Softaculous Page Builder: Pagelayer – Drag and Drop website builder Web / CMS
  • Medium 4.9
    CVE-2023-49746

    WordPress SpeedyCache Plugin <= 1.1.2 is vulnerable to Server Side Request Forgery (SSRF)

    Server-Side Request Forgery (SSRF) vulnerability in Softaculous Team SpeedyCache – Cache, Optimization, Performance.This issue affects SpeedyCache – Cache, Optimization, Performance: from n/a through 1.1.2.

    Softaculous SpeedyCache – Cache, Optimization, Performance
  • Medium 5.4
    CVE-2023-41854

    WordPress wpCentral Plugin <= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Softaculous Ltd. WpCentral plugin <= 1.5.7 versions.

    Softaculous wpCentral
  • Medium 4.7
    CVE-2022-45079

    WordPress Loginizer Plugin <= 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Softaculous Loginizer plugin <= 1.7.5 versions.

    Softaculous Loginizer
  • High 7.1
    CVE-2022-45084

    WordPress Loginizer Plugin <= 1.7.5 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Softaculous Loginizer plugin <= 1.7.5 versions.

    Softaculous Loginizer