Login Request a demo
SO
Vendor
softaculous
19 products with CVEs on record
59
CVEs
0
On KEV
3
New 30D
Products
BB
Backuply – Backup, Restore, Migrate and Clone
softaculous
8.0
6 CVEs0 on KEV1 new
SC
SpeedyCache – Cache, Optimization, Performance
softaculous
4.9
3 CVEs0 on KEV1 new
GP
GoSMTP Pro
softaculous
7.2
1 CVEs0 on KEV1 new
PB
Page Builder: Pagelayer – Drag and Drop website builder
softaculous
6.4
14 CVEs0 on KEV0 new
WE
Webuzo
Softaculous
9.8
6 CVEs0 on KEV0 new
FW
FileOrganizer – WordPress File Manager
softaculous
8.8
4 CVEs0 on KEV0 new
SS
SiteSEO – SEO Simplified
softaculous
6.4
4 CVEs0 on KEV0 new
BA
Backuply
Softaculous
7.5
3 CVEs0 on KEV0 new
LO
Loginizer
softaculous
8.8
3 CVEs0 on KEV0 new
SP
SpeedyCache
Softaculous
5.4
3 CVEs0 on KEV0 new
VI
Virtualizor
Softaculous
9.8
3 CVEs0 on KEV0 new
PA
PageLayer
Softaculous
6.5
2 CVEs0 on KEV0 new
AM
Ampps
Softaculous
7.5
1 CVEs0 on KEV0 new
FI
Fileorganizer
Softaculous
8.8
1 CVEs0 on KEV0 new
FM
Fileorganizer Manage Wordpress And Website Files
Softaculous
7.2
1 CVEs0 on KEV0 new
FO
FormLayer
Softaculous
5.3
1 CVEs0 on KEV0 new
LS
Loginizer Security
Softaculous
8.1
1 CVEs0 on KEV0 new
SO
Softaculous
Softaculous
7.8
1 CVEs0 on KEV0 new
WR
Whmcs Reseller Module
Softaculous
9.9
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-96768
GP
GoSMTP Pro
softaculous
7.2
0%
Oct 16GoSMTP Pro <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Email Log Body
CVE-2026-93953
BB
Backuply – Backup, Restore, Migrate and Clone
softaculous
8.0
0%
Oct 16Backuply <= 1.5.8 - Authenticated (Subscriber+) Second-Order SQL Injection via Restore to Privilege Escalation
CVE-2026-104006
SC
SpeedyCache – Cache, Optimization, Performance
softaculous
3.7
0%
Oct 10SpeedyCache <= 1.4.2 - Unauthenticated Sensitive Information Exposure via Insecure Cache Configuration via Cache Write Gate Missing comment_author_* Cookie Check
CVE-2026-43643
VI
Virtualizor
Softaculous
7.5
1%
Sep 22Softaculous Virtualizor Authorization Bypass via Billing Module Handler
CVE-2026-43642
VI
Virtualizor
Softaculous
8.1
1%
Sep 22Softaculous Virtualizor PHP Object Injection via Billing Module Handler
CVE-2026-43641
VI
Virtualizor
Softaculous
9.8
3%
Sep 22Softaculous Virtualizor OS Command Injection via Billing Module Handler
CVE-2026-5114
SC
SpeedyCache – Cache, Optimization, Performance
softaculous
4.9
0%
Jul 28SpeedyCache <= 1.3.8 - Authenticated (Administrator+) Arbitrary File Read
CVE-2026-59519
FO
FormLayer
Softaculous
5.3
0%
Jul 5WordPress FormLayer plugin <= 1.0.6 - Sensitive Data Exposure vulnerability
CVE-2026-2470
PB
Page Builder: Pagelayer – Drag and Drop website builder
softaculous
4.3
0%
Jun 13Pagelayer <= 2.0.9 - Incorrect Authorization to Authenticated (Contributor+) Mail Relay Configuration via 'contacts'
CVE-2026-3297
PB
Page Builder: Pagelayer – Drag and Drop website builder
softaculous
6.4
0%
Jun 13Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Anchor Block
CVE-2026-2509
PB
Page Builder: Pagelayer – Drag and Drop website builder
softaculous
6.4
0%
Apr 8Page Builder: Pagelayer <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributes
CVE-2026-39469
PA
PageLayer
Softaculous
4.3
0%
Apr 8WordPress PageLayer plugin <= 2.0.8 - Sensitive Data Exposure vulnerability
CVE-2026-2442
PB
Page Builder: Pagelayer – Drag and Drop website builder
softaculous
5.3
0%
Mar 28Pagelayer <= 2.0.7 - Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection via 'email'
CVE-2025-13085
SS
SiteSEO – SEO Simplified
softaculous
4.3
0%
Nov 19SiteSEO – SEO Simplified <= 1.3.2 - Insecure Direct Object Reference to Sensitive Post Meta Disclosure
CVE-2025-12814
SS
SiteSEO – SEO Simplified
softaculous
5.3
0%
Nov 19SiteSEO – SEO Simplified <= 1.3.2 - Improper Authorization to Authenticated Settings Reset
CVE-2025-12366
PB
Page Builder: Pagelayer – Drag and Drop website builder
softaculous
4.3
0%
Nov 13Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.5 - Authenticated (Author+) Insecure Direct Object Reference
CVE-2025-12367
SS
SiteSEO – SEO Simplified
softaculous
4.3
0%
Nov 1SiteSEO – SEO Simplified <= 1.3.1 - Missing Authorization to Authenticated (Author+) Plugin Settings Update
CVE-2025-10307
BB
Backuply – Backup, Restore, Migrate and Clone
softaculous
6.5
1%
Sep 26Backuply – Backup, Restore, Migrate and Clone <= 1.4.8 - Authenticated (Admin+) Arbitrary File Deletion
CVE-2025-9277
SS
SiteSEO – SEO Simplified
softaculous
6.4
0%
Aug 26SiteSEO – SEO Simplified <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Broken Regex Expression
CVE-2025-4223
PB
Page Builder: Pagelayer – Drag and Drop website builder
softaculous
4.7
0%
May 24Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.0 - Reflected Cross-Site Scripting via login_url Parameter
CVE-2024-13427
PB
Page Builder: Pagelayer – Drag and Drop website builder
softaculous
6.4
0%
May 24Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Link
CVE-2025-2104
PB
Page Builder: Pagelayer – Drag and Drop website builder
softaculous
4.3
0%
Mar 13Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.9 - Missing Authorization to Authenticated (Contributor+) Post Publication
CVE-2024-13430
PB
Page Builder: Pagelayer – Drag and Drop website builder
softaculous
4.3
0%
Mar 12Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Authenticated (Contributor+) Private Post Disclosure in pagelayer_builder_posts_shortcode
CVE-2025-1926
PB
Page Builder: Pagelayer – Drag and Drop website builder
softaculous
4.3
0%
Mar 10Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Cross-Site Request Forgery (CSRF) To Post Contents Modification
CVE-2025-24573
PA
PageLayer
Softaculous
6.5
0%
Jan 24WordPress Pagelayer plugin <= 1.9.4 - Cross Site Scripting (XSS) vulnerability
CVE-2024-11010
FW
FileOrganizer – WordPress File Manager
softaculous
7.2
1%
Dec 7FileOrganizer <= 1.1.4 - Authenticated (Administrator+) Local JavaScript File Inclusion
CVE-2024-10097
LO
Loginizer
softaculous
8.1
1%
Nov 5Loginizer Security and Loginizer <= 1.9.2 - Authentication Bypass via WordPress.com OAuth provider
CVE-2024-7985
FW
FileOrganizer – WordPress File Manager
softaculous
8.8
2%
Oct 29FileOrganizer <= 1.0.9 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2024-8669
BB
Backuply – Backup, Restore, Migrate and Clone
softaculous
7.2
17%
Sep 14Backuply – Backup, Restore, Migrate and Clone <= 1.3.4 - Authenticated (Admin+) SQL Injection
CVE-2024-43299
SP
SpeedyCache
Softaculous
5.4
0%
Aug 26WordPress SpeedyCache plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-24622
WE
Webuzo
Softaculous
8.8
2%
Jul 25Softaculous Webuzo Password Reset Command Injection
CVE-2024-24623
WE
Webuzo
Softaculous
8.8
2%
Jul 25Softaculous Webuzo FTP Management Command Injection
CVE-2024-24621
WE
Webuzo
Softaculous
9.8
1%
Jul 25Softaculous Webuzo Authentication Bypass
CVE-2024-5599
FW
FileOrganizer – WordPress File Manager
softaculous
7.5
1%
Jun 7FileOrganizer <= 1.0.7 - Sensitive Information Exposure via Directory Listing
CVE-2024-2324
FW
FileOrganizer – WordPress File Manager
softaculous
5.4
0%
May 2FileOrganizer and FileOrganizer Pro <= 1.0.6 - Authenticated Stored Cross-Site Scripting
CVE-2024-2504
PB
Page Builder: Pagelayer – Drag and Drop website builder
softaculous
5.4
0%
Apr 9Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom attributes
CVE-2024-2294
BB
Backuply – Backup, Restore, Migrate and Clone
softaculous
4.9
1%
Mar 16Backuply – Backup, Restore, Migrate and Clone <= 1.2.7 - Authenticated (Admin+) Directory Traversal
CVE-2024-2127
PB
Page Builder: Pagelayer – Drag and Drop website builder
softaculous
5.4
0%
Mar 7Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes
CVE-2024-1590
PB
Page Builder: Pagelayer – Drag and Drop website builder
softaculous
5.4
0%
Feb 23Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button
CVE-2024-0842
BB
Backuply – Backup, Restore, Migrate and Clone
softaculous
7.5
1%
Feb 9Backuply - Backup, Restore, Migrate and Clone <= 1.2.6 - Denial of Service
CVE-2024-1189
AM
Ampps
Softaculous
7.5
1%
Feb 2AMPPS Encryption Passphrase denial of service
CVE-2024-0697
BB
Backuply – Backup, Restore, Migrate and Clone
softaculous
4.9
1%
Jan 27Backuply – Backup, Restore, Migrate and Clone <= 1.2.3 - Authenticated (Administrator+) Directory Traversal
CVE-2023-6598
SC
SpeedyCache – Cache, Optimization, Performance
softaculous
4.3
0%
Jan 11SpeedyCache <= 1.1.3 - Missing Authorization to Plugin Options Update
CVE-2023-6738
PB
Page Builder: Pagelayer – Drag and Drop website builder
softaculous
5.4
0%
Jan 4PageLayer <= 1.7.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via meta fields
CVE-2023-49746
SP
Speedycache
Softaculous
4.3
0%
Dec 7WordPress SpeedyCache Plugin <= 1.1.2 is vulnerable to Server Side Request Forgery (SSRF)
CVE-2022-45079
LO
Loginizer
Softaculous
8.8
0%
May 22WordPress Loginizer Plugin <= 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2022-45084
LO
Loginizer
Softaculous
6.1
0%
Apr 24WordPress Loginizer Plugin <= 1.7.5 is vulnerable to Cross Site Scripting (XSS)
CVE-2020-26886
SO
Softaculous
Softaculous
7.8
1%
Mar 18Softaculous before 5.5.7 is affected by a code execution vulnerability because of External Initialization of Trusted Variables or Data Stores
CVE-2017-6513
WR
Whmcs Reseller Module
Softaculous
9.9
1%
Mar 11The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual…
CVE-2013-6043
WE
Webuzo
Softaculous
–
3%
Dec 27The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on whether the user account exists, which…
CVE-2013-6041
WE
Webuzo
Softaculous
–
4%
Dec 27index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in a SOFTCookies sid cookie within a login action
CVE-2013-6042
WE
Webuzo
Softaculous
–
2%
Nov 19Cross-site scripting (XSS) vulnerability in filemanager/login.php in the File Manager module in Softaculous Webuzo before 2.1.4 allows remote attackers to inject arbitrary web…