Login Request a demo
WE
Vendor
Web-dorado
18 products with CVEs on record
30
CVEs
0
On KEV
0
New 30D
Products
CF
Contact Form Maker
web-dorado
9.8
4 CVEs0 on KEV0 new
WS
Web-dorado Spider Video Player
Web-dorado
–
3 CVEs0 on KEV0 new
WF
WP Form Builder
Web-dorado
8.8
3 CVEs0 on KEV0 new
EC
Event Calendar WD
Web-dorado
6.1
2 CVEs0 on KEV0 new
FM
Form Maker
Web-dorado
9.8
2 CVEs0 on KEV0 new
SP
Spidervplayer
Web-dorado
6.1
2 CVEs0 on KEV0 new
WI
WD Instagram Feed
Web-dorado
6.1
2 CVEs0 on KEV0 new
WD
Wdsocialwidgets
Web-dorado
8.8
2 CVEs0 on KEV0 new
BA
Backup-wd
Web-dorado
4.8
1 CVEs0 on KEV0 new
CF
Contact Form
Web-dorado
8.8
1 CVEs0 on KEV0 new
EW
Ecommerce WD
Web-dorado
–
1 CVEs0 on KEV0 new
GW
Gallery WD
Web-dorado
9.8
1 CVEs0 on KEV0 new
SC
Spider Calendar
Web-dorado
–
1 CVEs0 on KEV0 new
SC
Spider Catalog
Web-dorado
–
1 CVEs0 on KEV0 new
SE
Spider Event Calendar
Web-dorado
9.8
1 CVEs0 on KEV0 new
SF
Spider Facebook
Web-dorado
–
1 CVEs0 on KEV0 new
SP
Spidercatalog
Web-dorado
7.2
1 CVEs0 on KEV0 new
WW
WD Widgettwitter
Web-dorado
6.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2019-25734
CF
Contact Form Maker
Web-Dorado
4.0
1%
Jun 4Contact Form by WD 1.13.1 CSRF to Local File Inclusion
CVE-2018-25347
CF
Contact Form Maker
web-dorado
7.1
0%
May 23WordPress Contact Form Maker Plugin 1.12.20 SQL Injection
CVE-2024-6520
WF
WP Form Builder
Web-dorado
4.4
0%
Jul 27Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2023-2655
CF
Contact Form Maker
Web-dorado
7.2
1%
Jan 16Contact Form by WD <= 1.13.23 - Admin+ SQLi
CVE-2023-48320
SP
Spidervplayer
Web-dorado
4.8
0%
Nov 30WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-5048
WF
WP Form Builder
Web-dorado
5.4
0%
Nov 22WDContactFormBuilder <= 1.0.72 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-46619
WD
Wdsocialwidgets
Web-dorado
8.8
0%
Nov 13WordPress Spider Facebook Plugin <= 1.0.15 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-5709
WW
WD Widgettwitter
Web-dorado
6.5
1%
Nov 7WD WidgetTwitter <= 1.0.9 - Authenticated (Contributor+) SQL Injection via Shortcode
CVE-2023-46090
WD
Wdsocialwidgets
Web-dorado
6.1
0%
Oct 26WordPress Spider Facebook Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-45632
SP
Spidervplayer
Web-dorado
6.1
0%
Oct 18WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)
CVE-2021-24625
SP
Spidercatalog
Web-dorado
7.2
2%
Nov 8The SpiderCatalog WordPress plugin through 1.7.3 does not sanitise or escape the 'parent' and 'ordering' parameters from the admin dashboard before using them in a SQL statement,…
CVE-2021-24426
BA
Backup-wd
Web-dorado
4.8
1%
Jul 12The Backup by 10Web – Backup and Restore Plugin WordPress plugin through 1.0.20 does not sanitise or escape the tab parameter before outputting it back in the page, leading to a…
CVE-2019-11591
CF
Contact Form
Web-dorado
8.8
1%
Apr 29The WebDorado Contact Form plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory…
CVE-2019-11557
WF
WP Form Builder
Web-dorado
8.8
1%
Apr 26The WebDorado Contact Form Builder plugin before 1.0.69 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via…
CVE-2018-16164
EC
Event Calendar WD
Web-dorado
5.4
1%
Jan 9Cross-site scripting vulnerability in Event Calendar WD version 1.1.21 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified…
CVE-2018-10504
FM
Form Maker
Web-dorado
7.8
4%
Apr 27The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection
CVE-2018-10301
WI
WD Instagram Feed
Web-dorado
6.1
1%
Apr 23Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 Premium for WordPress allows remote attackers to inject arbitrary web script or…
CVE-2018-10300
WI
WD Instagram Feed
Web-dorado
6.1
1%
Apr 23Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML by…
CVE-2018-5991
FM
Form Maker
Web-dorado
9.8
3%
Feb 17SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different vulnerability than CVE-2015-2798
CVE-2018-5981
GW
Gallery WD
Web-dorado
9.8
3%
Feb 17SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tag_id parameter or gallery_id parameter
CVE-2015-2798
CF
Contact Form Maker
Web-dorado
9.8
3%
Jul 25SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter
CVE-2017-2224
EC
Event Calendar WD
Web-dorado
6.1
1%
Jul 7Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
CVE-2017-7719
SE
Spider Event Calendar
Web-dorado
9.8
2%
Apr 12SQL injection in the Spider Event Calendar (aka spider-event-calendar) plugin before 1.5.52 for WordPress is exploitable with the order_by parameter to calendar_functions.php or…
CVE-2015-4352
WS
Web-dorado Spider Video Player
Web-dorado
–
1%
Jun 15Cross-site request forgery (CSRF) vulnerability in the Spider Video Player module for Drupal allows remote attackers to hijack the authentication of administrators for requests…
CVE-2015-4351
WS
Web-dorado Spider Video Player
Web-dorado
–
1%
Jun 15The Spider Video Player module for Drupal allows remote authenticated users with the "access Spider Video Player administration" permission to delete arbitrary files via a crafted…
CVE-2015-4350
SC
Spider Catalog
Web-dorado
–
1%
Jun 15Multiple cross-site request forgery (CSRF) vulnerabilities in the Spider Catalog module for Drupal allow remote attackers to hijack the authentication of administrators for…
CVE-2015-2562
EW
Ecommerce WD
Web-dorado
–
39%
Mar 20Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla! allow remote attackers to execute arbitrary SQL commands via…
CVE-2015-2196
SC
Spider Calendar
Web-dorado
–
11%
Mar 3SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a…
CVE-2015-1582
SF
Spider Facebook
Web-dorado
–
2%
Feb 11Multiple cross-site scripting (XSS) vulnerabilities in the Spider Facebook plugin before 1.0.11 for WordPress allow (1) remote attackers to inject arbitrary web script or HTML via…
CVE-2014-8584
WS
Web-dorado Spider Video Player
Web-dorado
–
2%
Nov 4Cross-site scripting (XSS) vulnerability in the Web Dorado Spider Video Player (aka WordPress Video Player) plugin before 1.5.2 for WordPress allows remote attackers to inject…