Wedevs vulnerabilities
136 CVEs and advisories name Wedevs as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-121760WordPress weDocs plugin <= 2.6.1 - Broken Access Control vulnerability
- CVE-2026-120531Subscribe2 – Form, Email Subscribers & Newsletters <= 10.47 - Unauthenticated Stored Cross-Site Scripting via 'data[ip]' Parameter
- CVE-2026-109214User Frontend <= 4.3.13 - Unauthenticated Stored Cross-Site Scripting via Taxonomy Field Text-Input
- CVE-2026-104760weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site…
- CVE-2026-121767WordPress weDocs plugin <= 2.6.1 - Broken Access Control vulnerability
- CVE-2026-121993wePOS before 2.0.3 Missing Authorization via payment/process Endpoint
- CVE-2026-119485WordPress Dokan plugin <= 5.3.2 - Broken Access Control vulnerability
- CVE-2026-119487WordPress Dokan plugin <= 5.3.2 - Broken Access Control vulnerability
- CVE-2026-120070User Frontend <= 4.3.13 - Authenticated (Subscriber+) Privilege Escalation via post_content Parameter
- CVE-2026-116512Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injection
- CVE-2026-103962User Frontend <= 4.3.13 - Reflected Cross-Site Scripting via 'field_attr[required]' Parameter
- CVE-2026-96894ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.10 - Unauthenticated Stored Cross-Site Scripting via Inbound Email…
- CVE-2026-109891WordPress Happy Addons for Elementor plugin <= 3.50.1 - Broken Access Control vulnerability
- CVE-2026-25448WordPress WP ERP plugin <= 1.17.10 - Broken Access Control vulnerability
- CVE-2026-116850WordPress Happy Addons for Elementor plugin <= 3.50.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-52708WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability
- CVE-2026-48884WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability
- CVE-2026-115590WordPress Dokan plugin <= 5.3.1 - PHP Object Injection vulnerability
- CVE-2026-96574User Frontend <= 4.3.12 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpuf_payment_method' Parameter
- CVE-2026-104393WordPress Happy Addons for Elementor plugin <= 3.50.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-39750WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-32572WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-97281WordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerability
- CVE-2026-96346WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability
- CVE-2026-96343WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability
- CVE-2026-95525WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability
- CVE-2026-95524WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
- CVE-2026-95523WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
- CVE-2026-81283WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerability
- CVE-2026-18080ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment