WP
Vendor
wpazleen
5
CVEs
0
On KEV
4
New 30D
Products
PE7.2
Post Export Import with Media
wpazleen
4 CVEs0 on KEV3 new
SF9.8
SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications
wpazleen
1 CVEs0 on KEV1 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110268 | PE Post Export Import with Media wpazleen | 4.9 | Oct 17 | Post Export Import with Media <= 1.17.2 - Authenticated (Administrator+) Path Traversal via 'theme_slug' Parameter |
| CVE-2026-104764 | PE Post Export Import with Media wpazleen | 7.2 | Oct 14 | Post Export Import with Media <= 1.17.1 - Authenticated (Administrator+) PHP Object Injection via 'page_data[meta]' Parameter |
| CVE-2026-104748 | SF SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications wpazleen | 9.8 | Oct 14 | SimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment via simpleform_wp_register |
| CVE-2026-104763 | PE Post Export Import with Media wpazleen | 4.9 | Oct 10 | Post Export Import with Media <= 1.17.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'file_path' Parameter in media_metadata.json |
| CVE-2026-13430 | PE Post Export Import with Media wpazleen | 7.2 | Jul 10 | Post Export Import with Media <= 1.13.1 - Authenticated (Administrator+) Arbitrary File Upload via Trailing-Dot Filename Bypass in ZIP Media Import |