Saadiqbal vulnerabilities
56 CVEs and advisories name Saadiqbal as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-13844Post SMTP <= 3.1.2 - Authenticated (Administrator+) SQL Injection via columns Parameter
- CVE-2024-13805Advanced File Manager <= 5.2.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
- CVE-2024-13713WPExperts Square For GiveWP <= 1.3.1 - Authenticated (Subscriber+) SQL Injection
- CVE-2025-0521Post SMTP <= 3.0.2 - Unauthenticated Stored Cross-Site Scripting
- CVE-2024-13333Advanced File Manager 5.2.12 - 5.2.13 - Authenticated (Subscriber+) Arbitrary File Upload
- CVE-2024-11201myCred – Loyalty Points and Rewards plugin <= 2.7.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_send Shortcode
- CVE-2024-11391Advanced File Manager <= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Upload
- CVE-2024-10187myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode
- CVE-2022-4974Freemius SDK <= 2.4.2 - Missing Authorization Checks
- CVE-2024-8725Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Upload
- CVE-2024-8126Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload
- CVE-2024-8704Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale
- CVE-2024-8658myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification <= 2.7.3 - Missing Authorization to Unauthenticated Database Upgrade
- CVE-2024-5861WP Easy Pay (Free) <= 4.2.3 - Missing Authorization to Unauthenticated Service Disconnection
- CVE-2024-5598Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listing
- CVE-2024-1639License Manager for WooCommerce <= 3.0.6 - Improper Authorization to Authenticated(Contributor+) Sensitive Information Exposure
- CVE-2024-5207POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.9.3 - Authenticated (Administrator+) SQL Injection
- CVE-2024-0437Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease <= 2.6.6 - Missing Authorization to Sensitive Information Exposure
- CVE-2024-0656Password Protected <= 2.6.6 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2023-6875POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Authorization Bypass via type connect-app API
- CVE-2023-7027POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Unauthenticated Stored Cross-Site Scripting via device
- CVE-2023-6629POST SMTP Mailer <= 2.8.6 - Reflected Cross-Site Scripting via msg
- CVE-2021-4422POST SMTP Mailer <= 2.0.20 - Cross-Site Request Forgery Bypass
- CVE-2023-3082Post SMTP <= 2.5.7 - Unauthenticated Stored Cross-Site Scripting via Email
- CVE-2021-4411WP EasyPay – Square for WordPress <= 3.2.0 - Cross-Site Request Forgery Bypass
- CVE-2019-25150Email Templates <= 1.3 - HTML Injection