FM
Vendor
Fahad Mahmood
29
CVEs
0
On KEV
0
New 30D
Products
WD8.8
WP Docs
Fahad Mahmood
8 CVEs0 on KEV0 new
KB7.5
Keep Backup Daily
Fahad Mahmood
3 CVEs0 on KEV0 new
EP6.1
Endless Posts Navigation
Fahad Mahmood
2 CVEs0 on KEV0 new
RF5.9
RSS Feed Widget
Fahad Mahmood
2 CVEs0 on KEV0 new
SL7.1
Stock Locations for WooCommerce
Fahad Mahmood
2 CVEs0 on KEV0 new
WD9.8
WP Datepicker
Fahad Mahmood
2 CVEs0 on KEV0 new
WS8.8
WP Sort Order
Fahad Mahmood
2 CVEs0 on KEV0 new
AP7.1
Alphabetic Pagination
Fahad Mahmood
1 CVEs0 on KEV0 new
CW4.8
Chameleon (WordPress plugin)
Fahad Mahmood
1 CVEs0 on KEV0 new
EU4.3
Easy Upload Files During Checkout
Fahad Mahmood
1 CVEs0 on KEV0 new
ES7.5
External Store for Shopify
Fahad Mahmood
1 CVEs0 on KEV0 new
GS7.1
Gulri Slider
Fahad Mahmood
1 CVEs0 on KEV0 new
IG4.3
Injection Guard
Fahad Mahmood
1 CVEs0 on KEV0 new
OS8.5
Order Splitter for WooCommerce
Fahad Mahmood
1 CVEs0 on KEV0 new
WQ7.1
WP Quick Shop
Fahad Mahmood
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-81782 | WD WP Docs Fahad Mahmood | 6.5 | Sep 10 | WordPress WP Docs plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-75133 | KB Keep Backup Daily Fahad Mahmood | 7.5 | Aug 31 | Keep Backup Daily WordPress Plugin < 2.1.4 Sensitive Information Exposure via kbd_cron_process |
| CVE-2026-28567 | WS WP Sort Order Fahad Mahmood | 7.5 | Aug 18 | WordPress WP Sort Order plugin <= 1.3.5 - Broken Access Control vulnerability |
| CVE-2026-57419 | SL Stock Locations for WooCommerce Fahad Mahmood | 6.5 | Jul 13 | WordPress Stock Locations for WooCommerce plugin <= 3.1.8 - Broken Access Control vulnerability |
| CVE-2026-25332 | EP Endless Posts Navigation Fahad Mahmood | 5.3 | Feb 19 | WordPress Endless Posts Navigation plugin <= 2.2.9 - Broken Access Control vulnerability |
| CVE-2026-24990 | WD WP Docs Fahad Mahmood | 5.4 | Feb 3 | WordPress WP Docs plugin <= 2.2.8 - Broken Access Control vulnerability |
| CVE-2025-69349 | RF RSS Feed Widget Fahad Mahmood | 5.4 | Jan 6 | WordPress RSS Feed Widget plugin <= 3.0.2 - Broken Access Control vulnerability |
| CVE-2025-62078 | EU Easy Upload Files During Checkout Fahad Mahmood | 4.3 | Dec 31 | WordPress Easy Upload Files During Checkout plugin <= 3.0.0 - Broken Access Control vulnerability |
| CVE-2025-47463 | SL Stock Locations for WooCommerce Fahad Mahmood | 7.1 | Jun 9 | WordPress Stock Locations for WooCommerce plugin <= 2.8.6 - Broken Access Control Vulnerability |
| CVE-2025-30999 | ES External Store for Shopify Fahad Mahmood | 7.5 | Jun 6 | WordPress External Store for Shopify plugin <= 1.5.9 - Local File Inclusion vulnerability |
| CVE-2025-31089 | OS Order Splitter for WooCommerce Fahad Mahmood | 8.5 | Apr 1 | WordPress Order Splitter for WooCommerce plugin <= 5.3.0 - SQL Injection Vulnerability |
| CVE-2025-31417 | WD WP Docs Fahad Mahmood | 4.3 | Mar 31 | WordPress WP Docs plugin < 2.2.7 - Broken Access Control vulnerability |
| CVE-2025-26751 | AP Alphabetic Pagination Fahad Mahmood | 7.1 | Feb 25 | WordPress Alphabetic Pagination Plugin <= 3.2.1 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-26779 | KB Keep Backup Daily Fahad Mahmood | 4.9 | Feb 16 | WordPress Keep Backup Daily plugin <= 2.1.0 - Arbitrary File Download vulnerability |
| CVE-2024-56288 | WD WP Docs Fahad Mahmood | 4.8 | Jan 7 | WordPress WP Docs plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-56223 | GS Gulri Slider Fahad Mahmood | 7.1 | Dec 31 | WordPress Gulri Slider plugin <= 3.5.8 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-54344 | WQ WP Quick Shop Fahad Mahmood | 7.1 | Dec 13 | WordPress WP Quick Shop plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2023-32574 | IG Injection Guard Fahad Mahmood | 4.3 | Dec 13 | WordPress Injection Guard plugin <= 1.2.1 - Broken Access Control vulnerability |
| CVE-2023-30873 | WD WP Docs Fahad Mahmood | 8.8 | Dec 9 | WordPress WP Docs plugin <= 1.9.8 - Broken Access Control |
| CVE-2024-47321 | WD WP Datepicker Fahad Mahmood | 9.8 | Nov 1 | WordPress WP Datepicker plugin <= 2.1.1 - Broken Access Control vulnerability |
| CVE-2024-49629 | EP Endless Posts Navigation Fahad Mahmood | 6.1 | Oct 20 | WordPress Endless Posts Navigation plugin <= 2.2.7 - CSRF to Stored XSS vulnerability |
| CVE-2024-48024 | KB Keep Backup Daily Fahad Mahmood | 7.5 | Oct 17 | WordPress Keep Backup Daily plugin <= 2.1.3 - Sensitive Data Exposure vulnerability |
| CVE-2024-44042 | WD WP Datepicker Fahad Mahmood | 4.8 | Oct 6 | WordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-31294 | WS WP Sort Order Fahad Mahmood | 8.8 | Jun 9 | WordPress WP Sort Order plugin <= 1.3.1 - Broken Access Control vulnerability |
| CVE-2024-35695 | WD WP Docs Fahad Mahmood | 5.4 | Jun 8 | WordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-35696 | WD WP Docs Fahad Mahmood | 6.1 | Jun 8 | WordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-32690 | RF RSS Feed Widget Fahad Mahmood | 5.9 | Apr 22 | WordPress RSS Feed Widget plugin <= 2.9.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2023-32106 | WD WP Docs Fahad Mahmood | 6.1 | Aug 18 | WordPress WP Docs Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2022-44736 | CW Chameleon (WordPress plugin) Fahad Mahmood | 4.8 | Nov 17 | WordPress Chameleon plugin <= 1.4.3 - Auth. Stored Cross-Site Scripting (XSS) vulnerability |