Wpdevteam vulnerabilities
115 CVEs and advisories name Wpdevteam as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-1698NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection
- CVE-2024-1171Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery
- CVE-2024-1172Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion
- CVE-2024-1276Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-1349EmbedPress <= 3.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-1425EmbedPress <= 3.9.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Google Calendar Widget Link
- CVE-2024-1236Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-0586Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scritping
- CVE-2024-0954Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-0585Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image URl
- CVE-2023-7071Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2023-7044Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2023-6986EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor <= 3.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-4386Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries
- CVE-2023-4402Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products
- CVE-2023-4283EmbedPress <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-4282EmbedPress <= 3.8.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Delete via admin_post_remove and remove_private_data
- CVE-2023-3779Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure
- CVE-2020-36744NotificationX <= 1.8.2 - Cross-Site Request Forgery Bypass
- CVE-2023-3371EmbedPress <= 3.7.3 - Sensitive Information Exposure
- CVE-2023-2083Essential Blocks <= 4.0.6 - Missing Authorization via save
- CVE-2023-2087Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save
- CVE-2023-2085Essential Blocks <= 4.0.6 - Missing Authorization via templates
- CVE-2023-2086Essential Blocks <= 4.0.6 - Missing Authorization via template_count
- CVE-2023-2084Essential Blocks <= 4.0.6 - Missing Authorization via get