Skip to content
OpenAdvisories

Vendor

Stiofan

13 known vulnerabilities.

Products

UsersWP 5 GetPaid 3 BlockStrap Page Builder - Bootstrap Blocks 2 Events Calendar for GeoDirectory 2 AyeCode Connect 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-103086

    WordPress UsersWP plugin <= 1.2.74 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP: from n/a through 1.2.74.

    Stiofan UsersWP
  • Medium 4.3
    CVE-2026-25015

    WordPress UsersWP plugin <= 1.2.53 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This issue affects UsersWP: from n/a through <= 1.2.53.

    Stiofan UsersWP
  • Medium 4.3
    CVE-2025-67593

    WordPress UsersWP plugin <= 1.2.48 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This issue affects UsersWP: from n/a through <= 1.2.48.

    Stiofan UsersWP
  • Medium 5.3
    CVE-2025-66072

    WordPress UsersWP plugin <= 1.2.47 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP: from n/a through <= 1.2.47.

    Stiofan UsersWP
  • Medium 6.5
    CVE-2025-30951

    WordPress BlockStrap Page Builder - Bootstrap Blocks plugin <= 0.1.36 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan BlockStrap Page Builder - Bootstrap Blocks blockstrap-page-builder-blocks allows Stored XSS.This issue affects BlockStrap Page Builder - Bootstrap Bl…

    Stiofan BlockStrap Page Builder - Bootstrap Blocks
  • Medium 4.3
    CVE-2024-56255

    WordPress AyeCode Connect plugin <= 1.3.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Stiofan AyeCode Connect ayecode-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AyeCode Connect: from n/a through <= 1.3.8.

    Stiofan AyeCode Connect
  • Medium 4.3
    CVE-2024-43973

    WordPress GetPaid plugin <= 2.8.11 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Stiofan GetPaid invoicing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GetPaid: from n/a through <= 2.8.11.

    Stiofan GetPaid