Skip to content
OpenAdvisories

Vendor

WPDeveloper

62 known vulnerabilities.

Products

Essential Addons for Elementor 14 EmbedPress 9 Essential Blocks for Gutenberg 8 BetterDocs 6 Templately 6 NotificationX 4 Typing Text 2 Essential Addons for Elementor Pro 2 SchedulePress 2 BetterLinks 2 Parallax Slider Block 1 Secret Meta 1 Document Block – Upload & Embed Docs 1 Simple 301 Redirects by BetterLinks 1 Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More 1 Table Of Contents Block 1 ReviewX – Multi-criteria Rating & Reviews for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 8.2
    CVE-2022-51021

    NotificationX WordPress Plugin < 2.3.12 Unauthenticated SQL Injection via notification REST endpoint

    NotificationX plugin for WordPress 2.0.0 before 2.3.12 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by supplying an array-form 'id' parameter to /wp-json/notificationx/v1/notification/{id}…

    WPDeveloper NotificationX Web / CMS
  • High 7.1
    CVE-2026-66667

    WordPress Templately plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Templately <= 3.7.1 versions.

    WPDeveloper Templately
  • High 7.1
    CVE-2026-61961

    WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions.

    WPDeveloper EmbedPress
  • High 7.5
    CVE-2026-48872

    WordPress EmbedPress plugin <= 4.5.2 - Sensitive Data Exposure vulnerability

    Unauthenticated Sensitive Data Exposure in EmbedPress <= 4.5.2 versions.

    WPDeveloper EmbedPress
  • High 7.7
    CVE-2026-42379

    WordPress Templately plugin <= 3.6.1 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data.This issue affects Templately: from n/a through 3.6.1.

    WPDeveloper Templately
  • High 7.1
    CVE-2025-24752 Public exploit

    WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Reflected XSS.This issue affects Essential Addons for Elementor: from n…

    WPDeveloper Essential Addons for Elementor
  • High 7.1
    CVE-2025-25086

    WordPress Secret Meta plugin <= 1.2.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in WPDeveloper Secret Meta facebook-secret-meta allows Reflected XSS.This issue affects Secret Meta: from n/a through <= 1.2.1.

    WPDeveloper Secret Meta
  • High 7.3
    CVE-2023-45104

    WordPress BetterLinks plugin <= 1.6.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPDeveloper BetterLinks betterlinks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BetterLinks: from n/a through <= 1.6.0.

    WPDeveloper BetterLinks
  • High 7.6
    CVE-2024-51672

    WordPress BetterLinks plugin <= 2.1.7 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPDeveloper BetterLinks betterlinks allows SQL Injection.This issue affects BetterLinks: from n/a through <= 2.1.7.

    WPDeveloper BetterLinks
  • High 8.3
    CVE-2024-43328

    WordPress EmbedPress plugin <= 4.0.9 - Local File Inclusion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPDeveloper EmbedPress allows PHP Local File Inclusion.This issue affects EmbedPress: from n/a through 4.0.9.

    WPDeveloper EmbedPress
  • High 8.8
    CVE-2023-41955

    WordPress Essential Addons for Elementor plugin <= 5.8.8 - Contributor+ Privilege Escalation vulnerability

    Improper Privilege Management vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation.This issue affects Essential Addons for Elementor: from n/a through 5.8.8.

    WPDeveloper Essential Addons for Elementor
  • High 7.1
    CVE-2023-32241

    WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPDeveloper Essential Addons for Elementor Pro plugin <= 5.4.8 versions.

    WPDeveloper Essential Addons for Elementor Pro