Wedevs vulnerabilities
136 CVEs and advisories name Wedevs as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-30896WordPress WP ERP plugin <= 1.13.4 - Broken Access Control vulnerability
- CVE-2024-13436Appsero Helper <= 1.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2024-11582Subscribe2 – Form, Email Subscribers & Newsletters <= 10.43 - Unauthenticated Stored Cross-Site Scripting via IP Parameter
- CVE-2024-13500WP Project Manager <= 2.6.17 - Authenticated (Subscriber+) SQL Injection via orderby Parameter
- CVE-2024-13752WP Project Manager <= 2.6.17 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update
- CVE-2024-12195WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.16 - Authenticated (Subscriber+) SQL Injection
- CVE-2023-45765WordPress WP ERP plugin <= 1.12.6 - Broken Access Control vulnerability
- CVE-2023-45002WordPress WP User Frontend plugin <= 3.6.8 - Broken Access Control vulnerability
- CVE-2024-10548WP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST API
- CVE-2023-40003WordPress WP Project Manager plugin <= 2.6.7 - Broken Access Control vulnerability
- CVE-2024-12015SQL Injection in WordPress Project Manager Plugin
- CVE-2024-10520WP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/Deletion
- CVE-2024-10174WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.13 - Insecure Direct Object Reference to Unauthenticated Authorization Bypass
- CVE-2024-8739ReCaptcha Integration for WordPress <= 1.2.5 - Reflected Cross-Site Scripting
- CVE-2024-47640WordPress WP ERP plugin <= 1.13.2 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-38693WordPress WP User Frontend plugin <= 4.0.7 - SQL Injection vulnerability
- CVE-2024-43238WordPress weMail plugin <= 1.14.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-37946WordPress ReCaptcha Integration for WordPress plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-6666WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection via vendor_id
- CVE-2024-3922Dokan Pro <= 3.10.3 - Unauthenticated SQL Injection
- CVE-2024-34822WordPress weMail plugin <= 1.14.2 - Broken Access Control vulnerability
- CVE-2024-34442WordPress weDocs plugin <= 2.1.4 - Broken Access Control vulnerability
- CVE-2023-52217WordPress WooCommerce Conversion Tracking plugin <= 2.0.11 - Broken Access Control vulnerability
- CVE-2023-47682WordPress WP User Frontend plugin <= 3.6.5 - Authenticated Privilege Escalation vulnerability
- CVE-2024-1173WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (AccountingManager+) SQL Injection
- CVE-2024-0952WP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection via id
- CVE-2024-0956WP ERP <= 1.13.0 - Authenticated (AccountingManager+) SQL Injection
- CVE-2024-0609WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Unauthenticated Stored Cross-Site Scripting
- CVE-2024-0608WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (Subscriber+) SQL Injection
- CVE-2024-0913WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection