Saad Iqbal vulnerabilities
50 CVEs and advisories name Saad Iqbal as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-94175WordPress All In One Login plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-39734WordPress WP EasyPay plugin <= 4.5.4 - Path Traversal vulnerability
- CVE-2026-84762WordPress WP EasyPay plugin <= 4.5.3 - Bypass Vulnerability vulnerability
- CVE-2026-73345WordPress License Manager for WooCommerce plugin <= 3.0.18 - SQL Injection vulnerability
- CVE-2026-66425WordPress Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin <= 1.9.0 - Broken Authentication vulnerability
- CVE-2026-57808WordPress WP EasyPay plugin <= 4.5.0 - Arbitrary Content Deletion vulnerability
- CVE-2026-61968WordPress myCred plugin <= 3.1.2 - Broken Access Control vulnerability
- CVE-2026-61958WordPress License Manager for WooCommerce plugin <= 3.0.17 - Arbitrary Content Deletion vulnerability
- CVE-2026-57810WordPress APIExperts Square for WooCommerce plugin <= 4.7.4 - SQL Injection vulnerability
- CVE-2026-54848WordPress APIExperts Square for WooCommerce plugin <= 4.7.3 - Sensitive Data Exposure vulnerability
- CVE-2026-56024WordPress WP EasyPay plugin <= 4.5.0 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2026-45215WordPress WP EasyPay plugin <= 4.3.0 - Sensitive Data Exposure vulnerability
- CVE-2026-45211WordPress APIExperts Square for WooCommerce plugin <= 4.7.1 - SQL Injection vulnerability
- CVE-2026-25390WordPress New User Approve plugin <= 3.2.3 - Broken Access Control vulnerability
- CVE-2026-25001WordPress Post Snippets plugin <= 4.0.12 - Remote Code Execution (RCE) vulnerability
- CVE-2026-32587WordPress WP EasyPay plugin <= 4.2.11 - Broken Access Control vulnerability
- CVE-2025-69063WordPress New User Approve plugin <= 3.2.0 - Broken Access Control vulnerability
- CVE-2026-27440WordPress myCred plugin <= 2.9.7.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-24951WordPress myCred plugin <= 2.9.7.3 - Broken Access Control vulnerability
- CVE-2025-68881WordPress AppExperts plugin <= 1.4.5 - SQL Injection vulnerability
- CVE-2025-63040WordPress Post Snippets plugin <= 4.0.11 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2025-68080WordPress User Avatar - Reloaded plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-63030WordPress New User Approve plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2025-67563WordPress Post SMTP plugin <= 3.6.1 - Broken Access Control vulnerability
- CVE-2025-67471WordPress Quick Contact Form plugin <= 8.2.5 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2025-58595WordPress All In One Login plugin <= 2.0.8 - Bypass Vulnerability vulnerability
- CVE-2025-53218WordPress AppExperts plugin <= 1.4.5 - Sensitive Data Exposure vulnerability
- CVE-2025-58788WordPress License Manager for WooCommerce Plugin <= 3.0.12 - SQL Injection Vulnerability
- CVE-2025-48142WordPress Bookify <= 1.0.9 - Privilege Escalation Vulnerability
- CVE-2025-54668WordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) Vulnerability