MN
Vendor
mndpsingh287
20
CVEs
0
On KEV
0
New 30D
Products
FM9.9
File Manager
mndpsingh287
6 CVEs0 on KEV0 new
TE9.6
Theme Editor
mndpsingh287
5 CVEs0 on KEV0 new
NP8.8
Newsletter Popup
Mndpsingh287
4 CVEs0 on KEV0 new
AS8.7
Advanced Search
Mndpsingh287
2 CVEs0 on KEV0 new
WM7.1
WP Mail
mndpsingh287
2 CVEs0 on KEV0 new
TP7.1
Track Page Scroll
mndpsingh287
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-14469 | TE Theme Editor mndpsingh287 | 4.3 | Aug 1 | Theme Editor <= 3.1 - Cross-Site Request Forgery to CSS Modification |
| CVE-2026-39640 | TE Theme Editor mndpsingh287 | 9.6 | Apr 8 | WordPress Theme Editor plugin <= 3.2 - Cross Site Request Forgery (CSRF) to Remote Code Execution vulnerability |
| CVE-2025-68008 | WM WP Mail mndpsingh287 | 7.1 | Jan 22 | WordPress WP Mail plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-9890 | TE Theme Editor mndpsingh287 | 8.8 | Oct 18 | Theme Editor <= 3.0 - Cross-Site Request Forgery to Remote Code Execution |
| CVE-2025-58822 | WM WP Mail mndpsingh287 | 6.5 | Sep 5 | WordPress WP Mail Plugin <= 1.3 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-23536 | TP Track Page Scroll mndpsingh287 | 7.1 | Mar 3 | WordPress Track Page Scroll plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-37254 | FM File Manager mndpsingh287 | 4.3 | Nov 1 | WordPress WP File Manager plugin <= 7.2.7 - Broken Access Control vulnerability |
| CVE-2018-25105 | FM File Manager mndpsingh287 | 9.8 | Oct 16 | File Manager <= 3.0 - Unauthenticated Arbitrary File Upload/Download |
| CVE-2022-2440 | TE Theme Editor mndpsingh287 | 7.2 | Aug 29 | Theme Editor <= 2.8 - Authenticated (Admin+) PHAR Deserialization |
| CVE-2024-3644 | NP Newsletter Popup Mndpsingh287 | 4.8 | May 16 | Newsletter Popup <= 1.2 - Admin+ Stored XSS |
| CVE-2024-3643 | NP Newsletter Popup Mndpsingh287 | 8.8 | May 16 | Newsletter Popup <= 1.2 - List Deletion via CSRF |
| CVE-2024-3642 | NP Newsletter Popup Mndpsingh287 | 6.9 | May 16 | Newsletter Popup <= 1.2 - Subscriber Deletion via CSRF |
| CVE-2024-3641 | NP Newsletter Popup Mndpsingh287 | 6.1 | May 16 | Newsletter Popup <= 1.2 - Unauthenticated Stored XSS |
| CVE-2024-3265 | AS Advanced Search Mndpsingh287 | 4.7 | Apr 25 | WP Advanced Search <= 1.1.6 - Admin+ SQL Injection |
| CVE-2024-2739 | AS Advanced Search Mndpsingh287 | 8.7 | Apr 15 | Advance Search <= 1.1.6 - Shortcode Deletion via CSRF |
| CVE-2024-2654 | FM File Manager mndpsingh287 | 6.8 | Apr 9 | File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal |
| CVE-2023-6091 | TE Theme Editor mndpsingh287 | 7.2 | Mar 26 | WordPress Theme Editor plugin <= 2.7.1 - Arbitrary File Upload vulnerability |
| CVE-2024-1538 | FM File Manager mndpsingh287 | 8.8 | Mar 21 | File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion |
| CVE-2023-6825 | FM File Manager mndpsingh287 | 9.9 | Mar 13 | File Manager And File Manager Pro (Multiple Versions) - Directory Traversal |
| CVE-2024-0761 | FM File Manager mndpsingh287 | 7.5 | Feb 5 | File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames |