SA
Vendor
saadiqbal
12
CVEs
0
On KEV
2
New 30D
Products
PS6.4
Post Snippets – Custom WordPress Code Snippets Customizer
saadiqbal
2 CVEs0 on KEV1 new
PS7.2
Post SMTP – Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
saadiqbal
1 CVEs0 on KEV1 new
PM6.4
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
saadiqbal
2 CVEs0 on KEV0 new
WE4.3
WP Easy Pay – Payment and Donation form Builder for Square
saadiqbal
2 CVEs0 on KEV0 new
AF6.1
Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution
saadiqbal
1 CVEs0 on KEV0 new
GF5.3
Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder
saadiqbal
1 CVEs0 on KEV0 new
UM5.3
User Management
saadiqbal
1 CVEs0 on KEV0 new
WF8.8
Wholesale for WooCommerce
saadiqbal
1 CVEs0 on KEV0 new
WS8.2
WPFormify – Stripe Payments with Form and Checkout
saadiqbal
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-77871 New | PS Post Snippets – Custom WordPress Code Snippets Customizer saadiqbal | 6.4 | Oct 28 | Post Snippets <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes |
| CVE-2026-75962 | PS Post SMTP – Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App saadiqbal | 7.2 | Oct 6 | Post SMTP <= 4.0.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user_email' Parameter (Multisite Registration → Failed Email Log) |
| CVE-2026-12739 | WE WP Easy Pay – Payment and Donation Form Builder for Square saadiqbal | 4.3 | Sep 18 | WP Easy Pay <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion |
| CVE-2026-17149 | PM Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred saadiqbal | 6.4 | Sep 9 | myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute |
| CVE-2026-15009 | AF Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution saadiqbal | 6.1 | Aug 16 | Advanced File Manager <= 5.4.12 - Reflected Cross-Site Scripting via postMessage 'soundFile' Parameter |
| CVE-2026-6627 | WS WPFormify – Stripe Payments with Form and Checkout saadiqbal | 8.2 | Aug 5 | WPFormify <= 1.1.1 - Missing Authorization |
| CVE-2026-11995 | GF Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder saadiqbal | 5.3 | Aug 1 | Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 - Missing Authorization to Unauthenticated Arbitrary Form Entry Modification/Trash via process_bulk_action() |
| CVE-2026-12144 | WF Wholesale for WooCommerce saadiqbal | 8.8 | Jul 29 | Wholesale for WooCommerce <= 2.0.5 - Authenticated (Author+) Privilege Escalation via 'user_role_set' Parameter |
| CVE-2026-12738 | WE WP Easy Pay – Payment and Donation form Builder for Square saadiqbal | 4.3 | Jul 11 | WP Easy Pay <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Status Modification via wpep_draft_confirm AJAX Action |
| CVE-2026-12097 | UM User Management saadiqbal | 5.3 | Jul 8 | User Management <= 1.2 - Missing Authorization to Unauthenticated Plugin Settings Modification |
| CVE-2026-8607 | PM Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred saadiqbal | 6.4 | Jun 17 | myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrap' Shortcode Attribute |
| CVE-2026-7430 | PS Post Snippets – Custom WordPress Code Snippets Customizer saadiqbal | 4.4 | May 29 | Post Snippets <= 4.0.19 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import |