Skip to content
OpenAdvisories

Vendor

wedevs

138 known vulnerabilities.

Products

WP User Frontend 15 Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker 12 WP ERP 11 WP Project Manager 9 ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support 8 Happy Addons for Elementor 8 weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot 7 Dokan Pro 7 ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce 5 User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration 5 Subscribe2 – Form, Email Subscribers & Newsletters 4 weMail 4 weDocs 4 User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission 4 WP User Frontend Pro 3 StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce 3 WooCommerce Conversion Tracking 3 Dokan 3 User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration 3 ReCaptcha Integration for WordPress 2 weMail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins for WooCommerce 2 Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy 2 Appsero Helper 2 Subscribe2 2 StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart 2 WP Project Manager Pro 1 WP ERP Pro 1 WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting 1 Happy Addons Pro for Elementor 1 WP Project Manager (WordPress plugin) 1 Happy Addons for Elementor Pro 1 wePOS – Point Of Sale (POS) for WooCommerce & Dokan 1 ERP 1 WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-3054 Public exploit

    WP User Frontend Pro <= 4.1.3 - Authenticated (Subscriber+) Arbitrary File Upload

    The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the upload_files() function in all versions up to, and including, 4.1.3. This makes it possible for authenticated attackers, with Subs…

    wedevs WP User Frontend Pro Web / CMS