Wedevs vulnerabilities
136 CVEs and advisories name Wedevs as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-24711WordPress WooCommerce Conversion Tracking plugin <= 2.0.11 - Broken Access Control vulnerability
- CVE-2023-6632Happy Addons for Elementor <= 3.9.1.1 - Reflected Cross-Site Scripting
- CVE-2024-21747WordPress WP ERP Plugin <= 1.12.8 is vulnerable to SQL Injection
- CVE-2023-26525WordPress Dokan Plugin <= 3.7.12 is vulnerable to SQL Injection
- CVE-2023-34382WordPress Dokan Plugin <= 3.7.19 is vulnerable to PHP Object Injection
- CVE-2023-49860WordPress WP Project Manager Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-34383WordPress WP Project Manager Plugin <= 2.6.0 is vulnerable to SQL Injection
- CVE-2023-3636WP Project Manager <= 2.6.4 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation
- CVE-2023-34008WordPress WP ERP Plugin <= 1.12.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28989WordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2020-36745WP Project Manager <= 2.4.0 - Cross-Site Request Forgery Bypass
- CVE-2020-36735WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.6.3 - Cross-Site Request Forgery Bypass
- CVE-2023-1844Subscribe2 <= 10.40 - Missing Authorization
- CVE-2023-3407Subscribe2 <= 10.40 - Cross-Site Request Forgery
- CVE-2021-36826WordPress WP Project Manager plugin <= 2.4.13 - Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2021-24292Happy Addons for Elementor Free < 2.24.0 and Pro < 1.17.0 - Contributor+ Stored XSS