Skip to content
OpenAdvisories

Vendor

WP Experts

14 known vulnerabilities.

Products

APIExperts Square for WooCommerce 4 Wholesale For WooCommerce 2 Post SMTP 2 Gravity Forms Bookings premium 1 WP EasyPay 1 Advanced File Manager 1 File Manager Advanced Shortcode 1 Password Protected 1 CF7 Apps 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.5
    CVE-2026-32466

    WordPress Gravity Forms Bookings premium plugin <= 2.1 - SQL Injection vulnerability

    Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.

    WP Experts Gravity Forms Bookings premium
  • High 7.1
    CVE-2026-48838

    WordPress Post SMTP plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Post SMTP <= 3.6.2 versions.

    WP Experts Post SMTP
  • High 7.2
    CVE-2024-13914

    File Manager Advanced Shortcode <= Multiple Versions - Authenticated (Administrator+) Local JavaScript File Inclusion via Shortcode

    The File Manager Advanced Shortcode plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.4 (file-manager-advanced-shortcode) and 2.5.6 (advanced-file-manager-pro-premium), via the 'file_manager_advanced' shortco…

    WP Experts File Manager Advanced Shortcode Web / CMS
  • High 7.5
    CVE-2024-31297

    WordPress Wholesale For WooCommerce plugin <= 2.3.1 - Unauthenticated Arbitrary Post/Page vulnerability

    Missing Authorization vulnerability in WPExperts Wholesale For WooCommerce.This issue affects Wholesale For WooCommerce: from n/a through 2.3.0.

    WP Experts Wholesale For WooCommerce Web / CMS