wedevs

89 results · Clear filters · Feed

• Medium 6.1
  CVE-2023-6632

  Happy Addons for Elementor <= 3.9.1.1 - Reflected Cross-Site Scripting

  The Happy Addons for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via DOM in all versions up to and including 3.9.1.1 (versions up to 2.9.1.1 in Happy Addons for Elementor Pro) due to insufficient input sanitization and outpu…

  wedevs thehappymonster Happy Addons for Elementor Happy Addons for Elementor Pro Web / CMS
  Jan 11, 2024
• Medium 4.4
  CVE-2023-34382

  WordPress Dokan Plugin <= 3.7.19 is vulnerable to PHP Object Injection

  Deserialization of Untrusted Data vulnerability in weDevs Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy.This issue affects Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay,…

  wedevs Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy Web / CMS
  Dec 19, 2023
• Medium 6.5
  CVE-2023-49860

  WordPress WP Project Manager Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts allows Stored XSS.This issue affects WP Project…

  wedevs WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts
  Dec 14, 2023
• Medium 4.3
  CVE-2023-28989

  WordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)

  Cross-Site Request Forgery (CSRF) vulnerability in weDevs Happy Addons for Elementor plugin <= 3.8.2 versions.

  wedevs Happy Addons for Elementor
  Jul 10, 2023
• Medium 4.3
  CVE-2020-36745

  WP Project Manager <= 2.4.0 - Cross-Site Request Forgery Bypass

  The WP Project Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.0. This is due to missing or incorrect nonce validation on the do_updates() function. This makes it possible for unauthenticated atta…

  wedevs Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker Web / CMS
  Jul 1, 2023
• Medium 4.3
  CVE-2020-36735

  WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.6.3 - Cross-Site Request Forgery Bypass

  The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.3. This is due to missing or incorrect nonce validation on …

  wedevs ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support Web / CMS
  Jul 1, 2023
• Medium 4.3
  CVE-2023-1844

  Subscribe2 <= 10.40 - Missing Authorization

  The Subscribe2 plugin for WordPress is vulnerable to unauthorized access to email functionality due to a missing capability check when sending test emails in versions up to, and including, 10.40. This makes it possible for author-level attackers to send email…

  wedevs Subscribe2 – Form, Email Subscribers & Newsletters Web / CMS
  Jun 28, 2023
• Medium 4.3
  CVE-2023-3407

  Subscribe2 <= 10.40 - Cross-Site Request Forgery

  The Subscribe2 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 10.40. This is due to missing or incorrect nonce validation when sending test emails. This makes it possible for unauthenticated attackers to sen…

  wedevs Subscribe2 – Form, Email Subscribers & Newsletters Web / CMS
  Jun 28, 2023
• Medium 5.4
  CVE-2021-36826

  WordPress WP Project Manager plugin <= 2.4.13 - Stored Cross-Site Scripting (XSS) vulnerability

  Authenticated (subscriber or higher user role if allowed to access projects) Stored Cross-Site Scripting (XSS) vulnerability in weDevs WP Project Manager plugin <= 2.4.13 versions.

  wedevs WP Project Manager (WordPress plugin) Web / CMS
  Apr 4, 2022