Smub vulnerabilities
114 CVEs and advisories name Smub as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-3073Easy WP SMTP by SendLayer <= 2.3.0 - Exposure of Sensitive Information via the UI
- CVE-2024-4045Popup Builder by OptinMonster – WordPress Popups for Optins, Email Newsletters and Lead Generation <= 2.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-4473Sydney Toolbox <= 1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via aThemes: Portfolio Widget
- CVE-2024-4036Sydney Toolbox <= 1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-3649Contact Form by WPForms – Drag & Drop Form Builder for WordPress <= 1.8.7.2 - Unauthenticated Price Manipulation
- CVE-2024-3554All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-3208Sydney Toolbox <= 1.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery
- CVE-2024-3097WordPress Gallery Plugin – NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure
- CVE-2024-2302Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.2.9 - Sensitive Information Exposure
- CVE-2024-2936Sydney Toolbox <= 1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id
- CVE-2024-1935Giveaways and Contests by RafflePress <= 1.12.5 - Unauthenticated Stored Cross-Site Scripting
- CVE-2024-0903User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds <= 1.0.13 - Unauthenticated Stored Cross-Site Scripting
- CVE-2024-0379Custom Twitter Feeds – A Tweets Widget or X Feed Widget <= 2.2.1 - Cross-Site Request Forgery to Plugin Options Update
- CVE-2024-1447Sydney Toolbox <= 1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-0659Easy Digital Downloads <= 3.2.6 - Authenticated(Shop Manager+) Stored Cross-Site Scripting via variable pricing options
- CVE-2023-6742Envira Gallery Lite <= 1.8.7.2 - Missing Authorization to Gallery Modification via envira_gallery_insert_images
- CVE-2023-5049Giveaways and Contests by RafflePress <= 1.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-4841Feeds for YouTube <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-4404Donation Forms by Charitable <= 1.7.0.12 - Unauthenticated Privilege Escalation
- CVE-2023-3081WP Mail Logging <= 1.11.1 - Unauthenticated Stored Cross-Site Scripting via Email
- CVE-2019-25145Contact Form & SMTP Plugin by PirateForms <= 2.5.1 - Unauthenticated HTML injection
- CVE-2019-25141Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update
- CVE-2023-0586All in One SEO Pack <= 4.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2023-0585All in One SEO Pack <= 4.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting