WPDeveloper

46 results · Clear filters · Feed

• Medium 5.3
  CVE-2026-119507

  Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WPDeveloper Notification…

  WPDeveloper NotificationX
  Nov 7, 2026
• Medium 5.4
  CVE-2026-114120

  SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Action

  SchedulePress before 5.3.5 contains a missing authorization vulnerability that allows authenticated Contributor-level users to change any post's status and publish date via the wpsp_el_editor_form AJAX action. Attackers can reuse the wpsp-el-editor nonce from…

  WPDeveloper SchedulePress
  Oct 21, 2026
• Medium 6.4
  CVE-2026-110898

  WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability

  Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Privilege Escalation.This issue affects Essential Addons for Elementor: from n/a through 6.8.5.

  WPDeveloper Essential Addons for Elementor
  Oct 19, 2026
• Medium 6.5
  CVE-2026-102394

  WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Stored XSS.This issue affects Essential Addons for Elementor: from n/a …

  WPDeveloper Essential Addons for Elementor
  Oct 1, 2026
• Medium 5.3
  CVE-2026-81777

  WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability

  Authentication Bypass by Spoofing vulnerability in WPDeveloper Essential Addons for Elementor allows Identity Spoofing. This issue affects Essential Addons for Elementor: from n/a through 6.8.0.

  WPDeveloper Essential Addons for Elementor
  Aug 28, 2026
• Medium 6.5
  CVE-2026-66645

  WordPress Table Of Contents Block plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

  Contributor Cross Site Scripting (XSS) in Table Of Contents Block <= 1.5.0 versions.

  WPDeveloper Table Of Contents Block
  Aug 18, 2026
• Medium 6.5
  CVE-2026-65562

  WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability

  Contributor Cross Site Scripting (XSS) in BetterDocs <= 4.6.2 versions.

  WPDeveloper BetterDocs
  Jul 27, 2026
• Medium 6.5
  CVE-2026-57364

  WordPress Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More plugin <= 2.2.0 - Other Vulnerability Type vulnerability

  Improper Validation of Specified Quantity in Input vulnerability in WPDeveloper Better Payment – Instant Payments, Donations, Fundraising with Subscriptions &amp; More better-payment allows Accessing Functionality Not Properly Constrained by ACLs.This issue a…

  WPDeveloper Better Payment – Instant Payments, Donations, Fundraising with Subscriptions &amp; More
  Jul 13, 2026
• Medium 5.3
  CVE-2026-25440

  WordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerability

  Unauthenticated Broken Access Control in Essential Addons for Elementor < 6.6.0 versions.

  WPDeveloper Essential Addons for Elementor
  Jun 15, 2026
• Medium 5.3
  CVE-2026-42644

  WordPress BetterDocs plugin <= 4.3.10 - Sensitive Data Exposure vulnerability

  Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper BetterDocs betterdocs allows Retrieve Embedded Sensitive Data.This issue affects BetterDocs: from n/a through <= 4.3.10.

  WPDeveloper BetterDocs
  Apr 29, 2026
• Medium 5.3
  CVE-2026-27042

  WordPress NotificationX plugin <= 3.2.1 - Broken Access Control vulnerability

  Missing Authorization vulnerability in WPDeveloper NotificationX notificationx allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NotificationX: from n/a through <= 3.2.1.

  WPDeveloper NotificationX
  Feb 19, 2026
• Medium 5.3
  CVE-2026-23543

  WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerability

  Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Addons for Elementor: from n/a through <…

  WPDeveloper Essential Addons for Elementor
  Feb 19, 2026
• Medium 6.5
  CVE-2025-69092

  WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows DOM-Based XSS.This issue affects Essential Addons for Elementor: from n…

  WPDeveloper Essential Addons for Elementor
  Dec 30, 2025
• Medium 4.3
  CVE-2025-39589

  WordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure Vulnerability

  Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Retrieve Embedded Sensitive Data.This issue affects Essential Addons for Elemento…

  WPDeveloper Essential Addons for Elementor
  Apr 16, 2025
• Medium 6.5
  CVE-2025-39590

  WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Stored XSS.This issue affects Essential Addons for Elementor: from n/a …

  WPDeveloper Essential Addons for Elementor
  Apr 16, 2025
• Medium 4.3
  CVE-2025-26871

  WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability

  Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.8.3.

  WPDeveloper Essential Blocks for Gutenberg
  Feb 25, 2025
• Medium 5.4
  CVE-2025-22696

  WordPress Document Block – Upload & Embed Docs, PDF, PPT, XLS or Any Documents plugin <= 1.1.0 - Broken Access Control vulnerability

  Missing Authorization vulnerability in WPDeveloper Document Block – Upload & Embed Docs document.This issue affects Document Block – Upload & Embed Docs: from n/a through <= 1.1.0.

  WPDeveloper Document Block – Upload & Embed Docs
  Feb 4, 2025
• Medium 6.5
  CVE-2025-22683

  WordPress NotificationX plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper NotificationX notificationx allows Stored XSS.This issue affects NotificationX: from n/a through <= 2.9.5.

  WPDeveloper NotificationX
  Feb 3, 2025
• Medium 6.5
  CVE-2025-22315

  WordPress Typing Text plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Typing Text typing-text allows Stored XSS.This issue affects Typing Text: from n/a through <= 1.2.7.

  WPDeveloper Typing Text
  Jan 7, 2025
• Medium 6.5
  CVE-2024-56063

  WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Stored XSS.This issue affects Essential Addons for Elementor: from n/a …

  WPDeveloper Essential Addons for Elementor
  Dec 31, 2024
• Medium 6.5
  CVE-2022-47594

  WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access Control

  Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through 3.8.5.

  WPDeveloper Essential Blocks for Gutenberg
  Dec 13, 2024
• Medium 4.3
  CVE-2023-47760

  WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerability

  Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.2.0.

  WPDeveloper Essential Blocks for Gutenberg
  Dec 9, 2024
• Medium 4.3
  CVE-2023-47761

  WordPress Simple 301 Redirects by BetterLinks plugin <= 2.0.7 - Broken Access Control vulnerability

  Missing Authorization vulnerability in WPDeveloper Simple 301 Redirects by BetterLinks simple-301-redirects allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple 301 Redirects by BetterLinks: from n/a through <= 2.0…

  WPDeveloper Simple 301 Redirects by BetterLinks
  Dec 9, 2024
• Medium 4.3
  CVE-2023-47762

  WordPress BetterDocs plugin <= 2.5.2 - Broken Access Control vulnerability

  Missing Authorization vulnerability in WPDeveloper BetterDocs betterdocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BetterDocs: from n/a through <= 2.5.2.

  WPDeveloper BetterDocs
  Dec 9, 2024
• Medium 6.5
  CVE-2023-51360

  WordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerability

  Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.2.0.

  WPDeveloper Essential Blocks for Gutenberg
  Dec 9, 2024
• Medium 5.4
  CVE-2023-51359

  WordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerability

  Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.2.0.

  WPDeveloper Essential Blocks for Gutenberg
  Dec 9, 2024
• Medium 6.3
  CVE-2024-38707

  WordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerability

  Missing Authorization vulnerability in WPDeveloper EmbedPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EmbedPress: from n/a through 4.0.4.

  WPDeveloper EmbedPress
  Nov 1, 2024
• Medium 6.5
  CVE-2024-47308

  WordPress Templately plugin <= 3.1.2 - Broken Access Control vulnerability

  Missing Authorization vulnerability in WPDeveloper Templately templately.This issue affects Templately: from n/a through <= 3.1.2.

  WPDeveloper Templately
  Nov 1, 2024
• Medium 5.4
  CVE-2024-50423

  WordPress Templately plugin <= 3.1.5 - Broken Access Control vulnerability

  Missing Authorization vulnerability in WPDeveloper Templately templately allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Templately: from n/a through <= 3.1.5.

  WPDeveloper Templately
  Oct 29, 2024
• Medium 6.5
  CVE-2024-50424

  WordPress Templately plugin <= 3.1.5 - Broken Access Control vulnerability

  Missing Authorization vulnerability in WPDeveloper Templately templately allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Templately: from n/a through <= 3.1.5.

  WPDeveloper Templately
  Oct 29, 2024
• Medium 6.5
  CVE-2024-50461

  WordPress EmbedPress plugin <= 4.0.14 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper EmbedPress embedpress allows Stored XSS.This issue affects EmbedPress: from n/a through <= 4.0.14.

  WPDeveloper EmbedPress
  Oct 28, 2024
• Medium 6.5
  CVE-2024-47385

  WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Stored XSS.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.8.4.

  WPDeveloper Essential Blocks for Gutenberg
  Oct 5, 2024
• Medium 6.5
  CVE-2024-43936

  WordPress EmbedPress plugin <= 4.0.8 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper EmbedPress allows Stored XSS.This issue affects EmbedPress: from n/a through 4.0.8.

  WPDeveloper EmbedPress
  Aug 29, 2024
• Medium 6.5
  CVE-2024-43129

  WordPress BetterDocs plugin <= 3.5.8 - Local File Inclusion vulnerability

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPDeveloper BetterDocs allows PHP Local File Inclusion.This issue affects BetterDocs: from n/a through 3.5.8.

  WPDeveloper BetterDocs
  Aug 13, 2024
• Medium 6.5
  CVE-2024-43227

  WordPress BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer for Elementor & Gutenberg plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper BetterDocs allows Stored XSS.This issue affects BetterDocs: from n/a through 3.5.8.

  WPDeveloper BetterDocs
  Aug 12, 2024
• Medium 6.5
  CVE-2024-39649

  WordPress Essential Addons for Elementor plugin <= 5.9.26 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite.This issue affects Essential Addons for Elementor: from n/a through <= 5.9.26.

  WPDeveloper Essential Addons for Elementor
  Aug 1, 2024
• Medium 4.3
  CVE-2023-51375

  WordPress EmbedPress plugin <= 3.8.3 - Broken Access Control vulnerability

  Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.8.3.

  WPDeveloper EmbedPress
  Jun 21, 2024
• Medium 6.5
  CVE-2024-5058

  WordPress Typing Text plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper Typing Text allows Stored XSS.This issue affects Typing Text: from n/a through 1.2.5.

  WPDeveloper Typing Text
  Jun 21, 2024
• Medium 6.5
  CVE-2024-31284

  WordPress EmbedPress plugin <= 3.9.8 - Broken Access Control vulnerability

  Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.8.

  WPDeveloper EmbedPress
  Jun 9, 2024
• Medium 5.3
  CVE-2024-31274

  WordPress EmbedPress plugin <= 3.9.11 - Broken Access Control vulnerability

  Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.11.

  WPDeveloper EmbedPress
  Jun 9, 2024