Login Request a demo
MA
Product
My auctions allegro
by wphocus · last CVE Oct 28, 2026
9
CVEs
0
On KEV
8.1
Max CVSS
1
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 5Medium 4Low 0
Severity
All severities9Critical0High5Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add My auctions allegro to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-12851
8.1
1%
Dec 5
My auctions allegro <= 3.6.32 - Unauthenticated Local File Inclusion via controller
Affected: through 3.6.32
CVE-2026-22464
7.5
1%
Jan 22
WordPress My auctions allegro plugin <= 3.6.33 - Local File Inclusion vulnerability
Affected: through 3.6.33
CVE-2025-12850
7.5
0%
Dec 5
My auctions allegro <= 3.6.32 - Unauthenticated SQL Injection via auction_id
Affected: through 3.6.32
CVE-2026-22491
7.1
0%
Mar 25
WordPress My auctions allegro plugin <= 3.6.35 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.6.35
CVE-2025-67943
7.1
0%
Jan 22
WordPress My auctions allegro plugin <= 3.6.32 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.6.32
CVE-2025-68566
5.9
0%
Dec 24
WordPress My auctions allegro plugin <= 3.6.35 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.6.35
CVE-2026-116855
New
5.4–Oct 28
WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability
Affected: through 4.0.3
CVE-2025-68567
5.4
0%
Dec 24
WordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 3.6.33
CVE-2025-10048
4.9
0%
Oct 11
My Auctions Allegro Plugin <= 3.6.31 - Authenticated (Admin+) SQL Injection
Affected: through 3.6.31
Showing 9