Skip to content
OpenAdvisories

Vendor

wedevs

138 known vulnerabilities.

Products

WP User Frontend 15 Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker 12 WP ERP 11 WP Project Manager 9 ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support 8 Happy Addons for Elementor 8 weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot 7 Dokan Pro 7 ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce 5 User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration 5 Subscribe2 – Form, Email Subscribers & Newsletters 4 weMail 4 weDocs 4 User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission 4 WP User Frontend Pro 3 StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce 3 WooCommerce Conversion Tracking 3 Dokan 3 User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration 3 ReCaptcha Integration for WordPress 2 weMail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins for WooCommerce 2 Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy 2 Appsero Helper 2 Subscribe2 2 StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart 2 WP Project Manager Pro 1 WP ERP Pro 1 WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting 1 Happy Addons Pro for Elementor 1 WP Project Manager (WordPress plugin) 1 Happy Addons for Elementor Pro 1 wePOS – Point Of Sale (POS) for WooCommerce & Dokan 1 ERP 1 WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts 1
All Critical High Medium Low Exploited only Public exploit

44 results · Clear filters · Feed

  • High 7.1
    CVE-2023-26525

    WordPress Dokan Plugin <= 3.7.12 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy.This issue affects Dokan – Best WooCommerce Multivendor …

    wedevs Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy Web / CMS
  • High 8.5
    CVE-2023-34383

    WordPress WP Project Manager Plugin <= 2.6.0 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP Project Manager wedevs-project-manager allows SQL Injection.This issue affects WP Project Manager: from n/a through 2.6.0.

    wedevs WP Project Manager
  • High 8.8
    CVE-2023-3636

    WP Project Manager <= 2.6.4 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation

    The WP Project Manager plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.6.4 due to insufficient restriction on the 'save_users_map_name' function. This makes it possible for authenticated attackers, with minimal p…

    wedevs Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker Web / CMS
  • High 7.1
    CVE-2023-34008

    WordPress WP ERP Plugin <= 1.12.3 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in weDevs WP ERP plugin <= 1.12.3 versions.

    wedevs WP ERP