Skip to content
OpenAdvisories

Vendor

WPExperts

13 known vulnerabilities.

WPExperts at a glance

Last 12 months
10
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 5 10 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 1 vulnerability Jun July 2026: 0 vulnerabilities August 2026: 2 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 7 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202670
Sep 202600
Aug 202620
Jul 202600
Jun 202610
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

APIExperts Square for WooCommerce 4 Wholesale For WooCommerce 2 Post SMTP 2 Gravity Forms Bookings premium 1 WP EasyPay 1 Advanced File Manager 1 Password Protected 1 CF7 Apps 1
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Medium 5.4
    CVE-2026-119466

    WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Cross Site Request Forgery.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.

    WPExperts APIExperts Square for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2026-115959

    WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.

    WPExperts APIExperts Square for WooCommerce Web / CMS
  • Medium 4.3
    CVE-2026-115960

    WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.

    WPExperts APIExperts Square for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2026-110365

    WordPress Advanced File Manager plugin <= 5.4.14 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPExperts Advanced File Manager file-manager-advanced allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced File Manager: from n/a through 5.4.14.

    WPExperts Advanced File Manager
  • Medium 5.3
    CVE-2026-96449

    WordPress WP EasyPay plugin <= 4.5.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPExperts WP EasyPay wp-easy-pay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP EasyPay: from n/a through 4.5.4.

    WPExperts WP EasyPay
  • Medium 5.3
    CVE-2026-110367

    WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.

    WPExperts APIExperts Square for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2026-62058

    WordPress CF7 Apps plugin <= 3.7.2 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in WPExperts CF7 Apps contact-form-7-honeypot allows Retrieve Embedded Sensitive Data.This issue affects CF7 Apps: from n/a through 3.7.2.

    WPExperts CF7 Apps
  • Medium 5.4
    CVE-2026-81278

    WordPress Post SMTP plugin 4.0.0-beta.1 - Settings Change vulnerability

    Missing Authorization vulnerability in WPExperts Post SMTP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Post SMTP: from 4.0.0 through beta.1.

    WPExperts Post SMTP
  • High 8.5
    CVE-2026-32466

    WordPress Gravity Forms Bookings premium plugin <= 2.1 - SQL Injection vulnerability

    Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.

    WPExperts Gravity Forms Bookings premium
  • High 7.1
    CVE-2026-48838

    WordPress Post SMTP plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Post SMTP <= 3.6.2 versions.

    WPExperts Post SMTP
  • High 7.5
    CVE-2024-31297

    WordPress Wholesale For WooCommerce plugin <= 2.3.1 - Unauthenticated Arbitrary Post/Page vulnerability

    Missing Authorization vulnerability in WPExperts Wholesale For WooCommerce.This issue affects Wholesale For WooCommerce: from n/a through 2.3.0.

    WPExperts Wholesale For WooCommerce Web / CMS
  • Medium 5.3
    CVE-2024-30469

    WordPress Wholesale For WooCommerce plugin <= 2.3.0 - Unauthenticated Sensitive Data Exposure vulnerability

    Missing Authorization vulnerability in WPExperts Wholesale For WooCommerce.This issue affects Wholesale For WooCommerce: from n/a through 2.3.0.

    WPExperts Wholesale For WooCommerce Web / CMS
  • Medium 5.9
    CVE-2023-32580

    WordPress Password Protected Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPExperts Password Protected plugin <= 2.6.2 versions.

    WPExperts Password Protected