SI
Vendor
Saad Iqbal
48
CVEs
0
On KEV
0
New 30D
Products
MY9.8
myCred
Saad Iqbal
11 CVEs0 on KEV0 new
WE6.5
WP EasyPay
Saad Iqbal
5 CVEs0 on KEV0 new
LM7.6
License Manager for WooCommerce
Saad Iqbal
4 CVEs0 on KEV0 new
NU8.6
New User Approve
Saad Iqbal
4 CVEs0 on KEV0 new
PS8.8
Post SMTP
Saad Iqbal
4 CVEs0 on KEV0 new
AS8.5
APIExperts Square for WooCommerce
Saad Iqbal
3 CVEs0 on KEV0 new
AP8.5
AppExperts
Saad Iqbal
3 CVEs0 on KEV0 new
PS8.5
Post Snippets
Saad Iqbal
2 CVEs0 on KEV0 new
QC7.1
Quick Contact Form
Saad Iqbal
2 CVEs0 on KEV0 new
UM9.9
User Management
Saad Iqbal
2 CVEs0 on KEV0 new
AF9.8
Advanced File Manager
Saad Iqbal
1 CVEs0 on KEV0 new
AI5.3
All In One Login
Saad Iqbal
1 CVEs0 on KEV0 new
BO8.8
Bookify
Saad Iqbal
1 CVEs0 on KEV0 new
GF6.5
Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder
Saad Iqbal
1 CVEs0 on KEV0 new
GK6.5
Gutena Kit – Gutenberg Blocks and Templates
Saad Iqbal
1 CVEs0 on KEV0 new
ME5.4
myCred Elementor
Saad Iqbal
1 CVEs0 on KEV0 new
UA6.5
User Avatar - Reloaded
Saad Iqbal
1 CVEs0 on KEV0 new
WS8.5
WPExperts Square For GiveWP
Saad Iqbal
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-84762 | WE WP EasyPay Saad Iqbal | 5.3 | Sep 3 | WordPress WP EasyPay plugin <= 4.5.3 - Bypass Vulnerability vulnerability |
| CVE-2026-73345 | LM License Manager for WooCommerce Saad Iqbal | 7.1 | Aug 18 | WordPress License Manager for WooCommerce plugin <= 3.0.18 - SQL Injection vulnerability |
| CVE-2026-66425 | GF Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder Saad Iqbal | 6.5 | Aug 6 | WordPress Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin <= 1.9.0 - Broken Authentication vulnerability |
| CVE-2026-57808 | WE WP EasyPay Saad Iqbal | 6.5 | Jul 23 | WordPress WP EasyPay plugin <= 4.5.0 - Arbitrary Content Deletion vulnerability |
| CVE-2026-61968 | MY myCred Saad Iqbal | 5.4 | Jul 13 | WordPress myCred plugin <= 3.1.2 - Broken Access Control vulnerability |
| CVE-2026-61958 | LM License Manager for WooCommerce Saad Iqbal | 5.4 | Jul 13 | WordPress License Manager for WooCommerce plugin <= 3.0.17 - Arbitrary Content Deletion vulnerability |
| CVE-2026-57810 | AS APIExperts Square for WooCommerce Saad Iqbal | 8.5 | Jul 13 | WordPress APIExperts Square for WooCommerce plugin <= 4.7.4 - SQL Injection vulnerability |
| CVE-2026-54848 | AS APIExperts Square for WooCommerce Saad Iqbal | 8.3 | Jun 25 | WordPress APIExperts Square for WooCommerce plugin <= 4.7.3 - Sensitive Data Exposure vulnerability |
| CVE-2026-56024 | WE WP EasyPay Saad Iqbal | 6.5 | Jun 18 | WordPress WP EasyPay plugin <= 4.5.0 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2026-45215 | WE WP EasyPay Saad Iqbal | 5.3 | May 12 | WordPress WP EasyPay plugin <= 4.3.0 - Sensitive Data Exposure vulnerability |
| CVE-2026-45211 | AS APIExperts Square for WooCommerce Saad Iqbal | 8.5 | May 12 | WordPress APIExperts Square for WooCommerce plugin <= 4.7.1 - SQL Injection vulnerability |
| CVE-2026-25390 | NU New User Approve Saad Iqbal | 6.5 | Mar 25 | WordPress New User Approve plugin <= 3.2.3 - Broken Access Control vulnerability |
| CVE-2026-25001 | PS Post Snippets Saad Iqbal | 8.5 | Mar 25 | WordPress Post Snippets plugin <= 4.0.12 - Remote Code Execution (RCE) vulnerability |
| CVE-2026-32587 | WE WP EasyPay Saad Iqbal | 5.4 | Mar 16 | WordPress WP EasyPay plugin <= 4.2.11 - Broken Access Control vulnerability |
| CVE-2025-69063 | NU New User Approve Saad Iqbal | 8.6 | Feb 20 | WordPress New User Approve plugin <= 3.2.0 - Broken Access Control vulnerability |
| CVE-2026-27440 | MY myCred Saad Iqbal | 6.5 | Feb 19 | WordPress myCred plugin <= 2.9.7.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-24951 | MY myCred Saad Iqbal | 4.3 | Feb 3 | WordPress myCred plugin <= 2.9.7.3 - Broken Access Control vulnerability |
| CVE-2025-68881 | AP AppExperts Saad Iqbal | 8.5 | Jan 22 | WordPress AppExperts plugin <= 1.4.5 - SQL Injection vulnerability |
| CVE-2025-63040 | PS Post Snippets Saad Iqbal | 4.3 | Dec 31 | WordPress Post Snippets plugin <= 4.0.11 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2025-68080 | UA User Avatar - Reloaded Saad Iqbal | 6.5 | Dec 16 | WordPress User Avatar - Reloaded plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-63030 | NU New User Approve Saad Iqbal | 7.1 | Dec 9 | WordPress New User Approve plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2025-67563 | PS Post SMTP Saad Iqbal | 5.3 | Dec 9 | WordPress Post SMTP plugin <= 3.6.1 - Broken Access Control vulnerability |
| CVE-2025-67471 | QC Quick Contact Form Saad Iqbal | 4.3 | Dec 9 | WordPress Quick Contact Form plugin <= 8.2.5 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2025-58595 | AI All In One Login Saad Iqbal | 5.3 | Nov 6 | WordPress All In One Login plugin <= 2.0.8 - Bypass Vulnerability vulnerability |
| CVE-2025-53218 | AP AppExperts Saad Iqbal | 5.8 | Oct 22 | WordPress AppExperts plugin <= 1.4.5 - Sensitive Data Exposure vulnerability |
| CVE-2025-58788 | LM License Manager for WooCommerce Saad Iqbal | 7.6 | Sep 5 | WordPress License Manager for WooCommerce Plugin <= 3.0.12 - SQL Injection Vulnerability |
| CVE-2025-48142 | BO Bookify Saad Iqbal | 8.8 | Aug 20 | WordPress Bookify <= 1.0.9 - Privilege Escalation Vulnerability |
| CVE-2025-54668 | MY myCred Saad Iqbal | 6.5 | Aug 14 | WordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-54667 | MY myCred Saad Iqbal | 5.3 | Aug 14 | WordPress myCred plugin <= 2.9.4.3 - Race Condition Vulnerability |
| CVE-2025-24000 | PS Post SMTP Saad Iqbal | 8.8 | Aug 7 | WordPress Post SMTP plugin <= 3.2.0 - Account Takeover Vulnerability |
| CVE-2025-49857 | MY myCred Saad Iqbal | 4.3 | Jun 17 | WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability |
| CVE-2025-49872 | MY myCred Saad Iqbal | 5.3 | Jun 17 | WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability |
| CVE-2025-48245 | QC Quick Contact Form Saad Iqbal | 7.1 | May 23 | WordPress Quick Contact Form plugin <= 8.2.1 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-47688 | AF Advanced File Manager Saad Iqbal | 9.8 | May 7 | WordPress Advanced File Manager plugin <= 5.3.1 - Broken Access Control to Notice Dismissal vulnerability |
| CVE-2025-32522 | LM License Manager for WooCommerce Saad Iqbal | 7.1 | Apr 17 | WordPress License Manager for WooCommerce plugin <= 3.0.9 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-31805 | GK Gutena Kit – Gutenberg Blocks and Templates Saad Iqbal | 6.5 | Apr 1 | WordPress Gutena Kit plugin <= 2.0.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-30609 | AP AppExperts Saad Iqbal | 5.3 | Mar 24 | WordPress AppExperts plugin <= 1.4.3 - Sensitive Data Exposure Vulnerability |
| CVE-2025-22736 | UM User Management Saad Iqbal | 8.8 | Jan 15 | WordPress User Management plugin <= 1.2 - Privilege Escalation vulnerability |
| CVE-2025-22800 | PS Post SMTP Saad Iqbal | 8.8 | Jan 13 | WordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerability |
| CVE-2024-54323 | NU New User Approve Saad Iqbal | 5.4 | Dec 13 | WordPress New User Approve plugin <= 2.6.2 - Broken Access Control vulnerability |
| CVE-2024-52436 | PS Post SMTP Saad Iqbal | 7.2 | Nov 18 | WordPress Post SMTP plugin <= 2.9.9 - SQL Injection vulnerability |
| CVE-2024-52403 | UM User Management Saad Iqbal | 9.9 | Nov 16 | WordPress User Management plugin <= 1.1 - Arbitrary File Upload vulnerability |
| CVE-2024-49702 | ME myCred Elementor Saad Iqbal | 5.4 | Oct 24 | WordPress myCred Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-47338 | WS WPExperts Square For GiveWP Saad Iqbal | 8.5 | Oct 6 | WordPress WPExperts Square For GiveWP plugin <= 1.3 - SQL Injection vulnerability |
| CVE-2024-43214 | MY myCred Saad Iqbal | 5.3 | Aug 26 | WordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerability |
| CVE-2024-43354 | MY myCred Saad Iqbal | 9.8 | Aug 19 | WordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerability |
| CVE-2024-43353 | MY myCred Saad Iqbal | 6.5 | Aug 18 | WordPress myCred plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-32711 | MY myCred Saad Iqbal | 6.5 | Apr 24 | WordPress myCred plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability |
