Login Request a demo
WE
Vendor
weDevs
25 products with CVEs on record
125
CVEs
0
On KEV
8
New 30D
Products
WP
WP Project Manager
weDevs
9.8
20 CVEs0 on KEV1 new
WE
WP ERP
weDevs
8.8
23 CVEs0 on KEV2 new
HA
Happy Addons for Elementor
weDevs
8.8
10 CVEs0 on KEV1 new
WU
WP User Frontend Pro
wedevs
8.8
3 CVEs0 on KEV1 new
SS
StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart
weDevs
7.5
2 CVEs0 on KEV1 new
DO
Dokan
weDevs
7.2
1 CVEs0 on KEV1 new
UF
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission
wedevs
6.4
1 CVEs0 on KEV1 new
WU
WP User Frontend
weDevs
9.8
14 CVEs0 on KEV0 new
PM
Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker
wedevs
6.5
7 CVEs0 on KEV0 new
DP
Dokan Pro
wedevs
8.8
6 CVEs0 on KEV0 new
WA
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot
wedevs
6.4
6 CVEs0 on KEV0 new
UF
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
wedevs
8.8
5 CVEs0 on KEV0 new
EC
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce
wedevs
9.8
4 CVEs0 on KEV0 new
WE
weMail
weDevs
7.5
4 CVEs0 on KEV0 new
SU
StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce
wedevs
7.2
3 CVEs0 on KEV0 new
UF
User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration
wedevs
5.3
3 CVEs0 on KEV0 new
AH
Appsero Helper
wedevs
8.5
2 CVEs0 on KEV0 new
SU
Subscribe2
weDevs
7.1
2 CVEs0 on KEV0 new
WE
weMail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins for WooCommerce
wedevs
6.5
2 CVEs0 on KEV0 new
WC
WooCommerce Conversion Tracking
weDevs
6.3
2 CVEs0 on KEV0 new
RI
Recaptcha Integration
Wedevs
6.1
1 CVEs0 on KEV0 new
SF
Subscribe2 – Form, Email Subscribers & Newsletters
wedevs
7.2
1 CVEs0 on KEV0 new
WE
weDocs
weDevs
5.3
1 CVEs0 on KEV0 new
WE
WP ERP Pro
weDevs
7.5
1 CVEs0 on KEV0 new
WP
WP Project Manager Pro
wedevs
6.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-115590
New
DO
Dokan
weDevs
7.2–Oct 28WordPress Dokan plugin <= 5.3.1 - PHP Object Injection vulnerability
CVE-2026-96574
UF
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission
wedevs
6.4
0%
Oct 10User Frontend <= 4.3.12 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpuf_payment_method' Parameter
CVE-2026-104393
HA
Happy Addons for Elementor
weDevs
6.5
0%
Oct 7WordPress Happy Addons for Elementor plugin <= 3.50.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39750
SS
StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart
weDevs
7.1
0%
Oct 6WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32572
WU
WP User Frontend Pro
weDevs
7.1
0%
Oct 6WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability
CVE-2026-97281
WP
WP Project Manager
weDevs
6.3
0%
Oct 1WordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerability
CVE-2026-96346
WE
WP ERP
weDevs
7.6
0%
Sep 30WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability
CVE-2026-96343
WE
WP ERP
weDevs
7.2
0%
Sep 30WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability
CVE-2026-95525
WU
WP User Frontend
weDevs
6.5
0%
Sep 23WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability
CVE-2026-95524
WU
WP User Frontend
weDevs
5.3
0%
Sep 23WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
CVE-2026-95523
WU
WP User Frontend
weDevs
6.5
0%
Sep 23WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
CVE-2026-81283
WU
WP User Frontend
weDevs
8.8
1%
Sep 2WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerability
CVE-2026-18080
EC
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce
wedevs
9.8
1%
Aug 26ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment
CVE-2026-78470
WP
WP Project Manager Pro
wedevs
6.5
0%
Aug 25WP Project Manager Pro <= 4.0.1 - Authenticated (Subscriber+) SQL Injection
CVE-2026-78262
WP
WP Project Manager
weDevs
9.8
1%
Aug 24WordPress WP Project Manager plugin <= 4.0.6 - PHP Object Injection vulnerability
CVE-2026-73393
SU
Subscribe2
weDevs
7.1
0%
Aug 18WordPress Subscribe2 plugin <= 10.46 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66466
SS
StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart
weDevs
7.5
0%
Aug 13WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.1.1 - Broken Access Control vulnerability
CVE-2026-11421
EC
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce
wedevs
6.5
1%
Aug 5ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support <= 1.17.4 - Authenticated (Custom+) SQL Injection via 'erpadvancefilter' Parameter
CVE-2026-13110
SU
StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce
wedevs
5.3
0%
Jul 28StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.0 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification via bogo_category_msg_create AJAX Action
CVE-2026-15411
SU
StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce
wedevs
5.3
0%
Jul 28StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.0 - Missing Authorization to Unauthenticated Options Update via create_popup AJAX Action
CVE-2026-13440
SU
StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce
wedevs
7.2
0%
Jul 28StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.0 - Unauthenticated Stored Cross-Site Scripting via 'message_popup' Parameter
CVE-2026-65492
DP
Dokan Pro
weDevs
7.1
0%
Jul 23WordPress Dokan Pro plugin < 5.0.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-59522
WE
WP ERP
weDevs
6.5
0%
Jul 23WordPress WP ERP plugin <= 1.17.5 - Broken Access Control vulnerability
CVE-2026-15349
EC
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce
wedevs
4.3
0%
Jul 17ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Company Location Creation via wp_ajax_erp-company-location AJAX Handler
CVE-2026-12418
UF
User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration
wedevs
5.3
0%
Jul 9User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Modification via 'wpuf_files_data' Parameter
CVE-2026-13011
EC
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce
wedevs
6.5
0%
Jul 9ERP: Complete HR, Accounting & CRM Suite with Recruitment and WooCommerce CRM Support <= 1.17.5 - Authenticated (HR Manager+) SQL Injection via 'orderby' Parameter
CVE-2026-12406
UF
User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration
wedevs
5.3
1%
Jul 9User Frontend <= 4.3.7 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attach_id' Parameter
CVE-2026-5459
UF
User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration
wedevs
5.3
0%
Jul 8User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Subscription Overwrite
CVE-2026-12731
WA
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot
wedevs
6.4
0%
Jul 3weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sectionTitleTag' and 'articleTitleTag' Block Attributes
CVE-2026-12729
WA
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot
wedevs
4.3
0%
Jul 3weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Data Migration via wedocs_migrate_betterdocs_to_wedocs AJAX Action
CVE-2026-12734
WA
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot
wedevs
6.4
0%
Jul 3weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'connectorWidth' Block Attribute
CVE-2026-12224
DP
Dokan Pro
wedevs
8.8
0%
Jul 1Dokan Pro <= 5.0.4 - Authenticated (Vendor+) Privilege Escalation via update_capabilities REST Endpoint
CVE-2026-57334
WU
WP User Frontend
weDevs
6.5
0%
Jun 29WordPress WP User Frontend plugin <= 4.3.7 - Broken Access Control vulnerability
CVE-2026-57322
WE
weMail
weDevs
7.1
0%
Jun 26WordPress weMail plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-12077
DP
Dokan Pro
wedevs
7.5
0%
Jun 25Dokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' Parameters
CVE-2026-12079
DP
Dokan Pro
wedevs
6.5
0%
Jun 25Dokan Pro <= 5.0.4 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter
CVE-2022-47150
WC
WooCommerce Conversion Tracking
weDevs
4.3
0%
Jun 11WordPress WooCommerce Conversion Tracking plugin <= 2.0.10 - Cross-Site Request Forgery (CSRF) vulnerability
CVE-2026-4058
UF
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
wedevs
4.3
0%
Jun 9User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.2 - Missing Authorization to Authenticated (Subscriber+) Subscription Pack Cancellation
CVE-2026-4834
WE
WP ERP Pro
weDevs
7.5
0%
May 22WP ERP Pro <= 1.5.1 - Unauthenticated SQL Injection via 'search_key' Parameter
CVE-2026-5127
UF
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
wedevs
8.8
1%
May 8User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Authenticated (Subscriber+) PHP Object Injection
CVE-2026-25468
HA
Happy Addons for Elementor
weDevs
5.3
0%
May 7WordPress Happy Addons for Elementor plugin <= 3.20.8 - Sensitive Data Exposure vulnerability
CVE-2026-42412
WU
WP User Frontend
weDevs
6.5
0%
Apr 29WordPress WP User Frontend plugin <= 4.3.1 - Broken Access Control vulnerability
CVE-2026-39520
WE
weDocs
weDevs
5.3
0%
Apr 8WordPress weDocs plugin <= 2.1.18 - Broken Access Control vulnerability
CVE-2026-32485
WU
WP User Frontend
weDevs
7.5
0%
Mar 25WordPress WP User Frontend plugin <= 4.2.8 - Broken Access Control vulnerability
CVE-2026-24364
WU
WP User Frontend
weDevs
6.5
0%
Mar 25WordPress WP User Frontend plugin <= 4.2.5 - Broken Access Control vulnerability
CVE-2026-2233
UF
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
wedevs
5.3
0%
Mar 15User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Post Modification via 'post_id' Parameter
CVE-2026-31917
WE
WP ERP
weDevs
8.5
0%
Mar 13WordPress WP ERP plugin <= 1.16.10 - SQL Injection vulnerability
CVE-2026-1565
UF
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
wedevs
8.8
1%
Feb 26User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Authenticated (Author+) Arbitrary File Upload
CVE-2025-14339
WE
weMail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins for WooCommerce
wedevs
6.5
0%
Feb 21weMail <= 2.0.7 - Missing Authorization to Unauthenticated Form Deletion
CVE-2026-24944
SU
Subscribe2
weDevs
6.5
0%
Feb 20WordPress Subscribe2 plugin <= 10.44 - Broken Access Control vulnerability
CVE-2025-13921
WA
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot
wedevs
4.3
0%
Jan 23weDocs <= 2.1.16 - Missing Authorization to Authenticated (Subscriber+) Documentation Post Update
CVE-2025-14348
WE
weMail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins for WooCommerce
wedevs
5.3
0%
Jan 20weMail <= 2.0.7 - Insufficient Authorization via x-wemail-user Header to Sensitive Information Disclosure
CVE-2025-14574
WA
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot
wedevs
5.3
0%
Jan 9weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.1.15 - Unauthenticated Sensitive Information Exposure
CVE-2025-14047
UF
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
wedevs
5.3
1%
Jan 2WP User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion
CVE-2025-68040
WP
WP Project Manager
weDevs
6.5
0%
Dec 29WordPress WP Project Manager plugin <= 3.0.1 - Sensitive Data Exposure vulnerability
CVE-2025-67546
WE
WP ERP
weDevs
6.5
0%
Dec 18WordPress WP ERP plugin <= 1.16.6 - Sensitive Data Exposure vulnerability
CVE-2025-12809
DP
Dokan Pro
wedevs
5.3
0%
Dec 16dokan pro <= 4.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure
CVE-2025-63008
WE
WP ERP
weDevs
5.3
0%
Dec 9WordPress WP ERP plugin <= 1.16.7 - Broken Access Control vulnerability
CVE-2025-12505
WA
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot
wedevs
5.4
0%
Dec 6weDocs <= 2.1.14 - Missing Authorization to Settings Update
CVE-2025-8994
PM
Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker
wedevs
6.5
0%
Nov 15WP Project Manager <= 2.6.26 - Authenticated (Subscriber+) SQL Injection via 'completed_at_operator'