Skip to content
OpenAdvisories

Vendor

wedevs

138 known vulnerabilities.

Products

WP User Frontend 15 Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker 12 WP ERP 11 WP Project Manager 9 ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support 8 Happy Addons for Elementor 8 weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot 7 Dokan Pro 7 ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce 5 User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration 5 Subscribe2 – Form, Email Subscribers & Newsletters 4 weMail 4 weDocs 4 User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission 4 WP User Frontend Pro 3 StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce 3 WooCommerce Conversion Tracking 3 Dokan 3 User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration 3 ReCaptcha Integration for WordPress 2 weMail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins for WooCommerce 2 Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy 2 Appsero Helper 2 Subscribe2 2 StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart 2 WP Project Manager Pro 1 WP ERP Pro 1 WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting 1 Happy Addons Pro for Elementor 1 WP Project Manager (WordPress plugin) 1 Happy Addons for Elementor Pro 1 wePOS – Point Of Sale (POS) for WooCommerce & Dokan 1 ERP 1 WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-116512 Public exploit

    Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injection

    The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.1 via the 'id' parameter parameter. This is due to unsaniti…

    wedevs Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker Web / CMS
  • Critical 9.8
    CVE-2026-18080 Public exploit

    ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment

    The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 1.17.8 via the save_attachments() function. This is due to missing file extension vali…

    wedevs ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce Web / CMS
  • High 8.8
    CVE-2025-3054 Public exploit

    WP User Frontend Pro <= 4.1.3 - Authenticated (Subscriber+) Arbitrary File Upload

    The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the upload_files() function in all versions up to, and including, 4.1.3. This makes it possible for authenticated attackers, with Subs…

    wedevs WP User Frontend Pro Web / CMS
  • Critical 10.0
    CVE-2024-3922 Public exploit Scanner template EPSS 53%

    Dokan Pro <= 3.10.3 - Unauthenticated SQL Injection

    The Dokan Pro plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter in all versions up to, and including, 3.10.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. T…

    wedevs Dokan Pro Web / CMS