Skip to content
OpenAdvisories

Vendor

WPExperts

13 known vulnerabilities.

Products

APIExperts Square for WooCommerce 4 Wholesale For WooCommerce 2 Post SMTP 2 Gravity Forms Bookings premium 1 WP EasyPay 1 Advanced File Manager 1 Password Protected 1 CF7 Apps 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-119466

    WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Cross Site Request Forgery.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.

    WPExperts APIExperts Square for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2026-115959

    WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.

    WPExperts APIExperts Square for WooCommerce Web / CMS
  • Medium 4.3
    CVE-2026-115960

    WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.

    WPExperts APIExperts Square for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2026-110365

    WordPress Advanced File Manager plugin <= 5.4.14 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPExperts Advanced File Manager file-manager-advanced allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced File Manager: from n/a through 5.4.14.

    WPExperts Advanced File Manager
  • Medium 5.3
    CVE-2026-96449

    WordPress WP EasyPay plugin <= 4.5.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPExperts WP EasyPay wp-easy-pay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP EasyPay: from n/a through 4.5.4.

    WPExperts WP EasyPay
  • Medium 5.3
    CVE-2026-110367

    WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.

    WPExperts APIExperts Square for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2026-62058

    WordPress CF7 Apps plugin <= 3.7.2 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in WPExperts CF7 Apps contact-form-7-honeypot allows Retrieve Embedded Sensitive Data.This issue affects CF7 Apps: from n/a through 3.7.2.

    WPExperts CF7 Apps
  • Medium 5.4
    CVE-2026-81278

    WordPress Post SMTP plugin 4.0.0-beta.1 - Settings Change vulnerability

    Missing Authorization vulnerability in WPExperts Post SMTP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Post SMTP: from 4.0.0 through beta.1.

    WPExperts Post SMTP
  • Medium 5.3
    CVE-2024-30469

    WordPress Wholesale For WooCommerce plugin <= 2.3.0 - Unauthenticated Sensitive Data Exposure vulnerability

    Missing Authorization vulnerability in WPExperts Wholesale For WooCommerce.This issue affects Wholesale For WooCommerce: from n/a through 2.3.0.

    WPExperts Wholesale For WooCommerce Web / CMS
  • Medium 5.9
    CVE-2023-32580

    WordPress Password Protected Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPExperts Password Protected plugin <= 2.6.2 versions.

    WPExperts Password Protected