Skip to content
OpenAdvisories

Vendor

webfactory

34 known vulnerabilities.

Products

Advanced Google reCAPTCHA 6 WP Reset 3 Login Lockdown & Protection 3 Order Export for WooCommerce 2 WP Reset PRO 2 Minimal Coming Soon – Coming Soon Page 2 Captcha Code 2 Email Log 2 Under Construction 2 Guest Author 1 AiBud WP 1 WordPress Charts 1 Login Lockdown 1 Maps Widget for Google Maps 1 WP Force SSL & HTTPS SSL Redirect 1 Login Lockdown – Protect Login Form 1 AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o 1 Database Reset 1 Under Construction Page (Pro) 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.6
    CVE-2026-94174

    WordPress Email Log plugin <= 2.63 - SQL Injection vulnerability

    Administrator SQL Injection in Email Log <= 2.63 versions.

    webfactory Email Log
  • High 8.8
    CVE-2026-5411 Public exploit

    WP Captcha PRO <= 5.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload

    The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 5.38. This is due to a capability check in the save_aja…

    webfactory Advanced Google reCAPTCHA Web / CMS
  • High 8.8
    CVE-2026-5415 Public exploit

    WP Captcha PRO <= 5.38 - Authenticated (Subscriber+) Authentication Bypass via Temporary Login Link

    The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.38. This is due to the ajax_run_tool() AJAX handler r…

    webfactory Advanced Google reCAPTCHA Web / CMS
  • High 8.1
    CVE-2024-0867

    Email Log <= 2.4.8 - Unauthenticated Hook Injection

    The Email Log plugin for WordPress is vulnerable to Unauthenticated Hook Injection in all versions up to, and including, 2.4.8 via the check_nonce function. This makes it possible for unauthenticated attackers to execute actions with hooks in WordPress under …

    webfactory Email Log Web / CMS
  • High 7.6
    CVE-2023-50837

    WordPress Login Lockdown Plugin <= 2.06 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WebFactory Ltd Login Lockdown – Protect Login Form.This issue affects Login Lockdown – Protect Login Form: from n/a through 2.06.

    webfactory Login Lockdown – Protect Login Form
  • High 8.8
    CVE-2021-36909

    WordPress WP Reset PRO Premium plugin <= 5.98 - Authenticated Database Reset vulnerability

    Authenticated Database Reset vulnerability in WordPress WP Reset PRO Premium plugin (versions <= 5.98) allows any authenticated user to wipe the entire database regardless of their authorization. It leads to a complete website reset and takeover.

    webfactory WP Reset PRO
  • High 8.8
    CVE-2021-36908

    WordPress WP Reset PRO Premium Plugin <= 5.98 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in WebFactory Ltd. WP Reset PRO plugin <= 5.98 versions.

    webfactory WP Reset PRO