Login Request a demo
WP
Vendor
wpdevart
23 products with CVEs on record
68
CVEs
0
On KEV
1
New 30D
Products
CT
Countdown Timer – Widget Countdown
wpdevart
6.4
2 CVEs0 on KEV1 new
BC
Booking calendar, Appointment Booking System
wpdevart
9.8
11 CVEs0 on KEV0 new
BC
Booking Calendar
Wpdevart
9.8
9 CVEs0 on KEV0 new
GA
Gallery
Wpdevart
8.8
7 CVEs0 on KEV0 new
RI
Responsive Image Gallery, Gallery Album
wpdevart
9.8
6 CVEs0 on KEV0 new
CS
Coming soon and Maintenance mode
wpdevart
5.4
4 CVEs0 on KEV0 new
OC
Organization chart
wpdevart
8.8
4 CVEs0 on KEV0 new
PT
Pricing Table builder
wpdevart
7.2
3 CVEs0 on KEV0 new
CF
Contact Form Builder
wpdevart
6.1
2 CVEs0 on KEV0 new
CA
Countdown And Countup, Woocommerce Sales Timer
Wpdevart
8.8
2 CVEs0 on KEV0 new
PS
Poll, Survey, Questionnaire And Voting System
Wpdevart
9.8
2 CVEs0 on KEV0 new
RV
Responsive Vertical Icon Menu
Wpdevart
5.4
2 CVEs0 on KEV0 new
SL
Social Like Box And Page
Wpdevart
5.4
2 CVEs0 on KEV0 new
WC
Widget Countdown
wpdevart
6.5
2 CVEs0 on KEV0 new
YE
Youtube Embed, Playlist And Popup
Wpdevart
5.4
2 CVEs0 on KEV0 new
BC
Booking Calendar Pro WpDevArt
WpDevArt
6.1
1 CVEs0 on KEV0 new
CF
Contact Form Builder, Contact Widget
wpdevart
5.3
1 CVEs0 on KEV0 new
DI
Download Image And Video Lightbox, Image Popup
Wpdevart
4.8
1 CVEs0 on KEV0 new
DP
Duplicate Page OR Post
Wpdevart
3.5
1 CVEs0 on KEV0 new
GI
Gallery - Image And Video Gallery With Thumbnails
Wpdevart
8.8
1 CVEs0 on KEV0 new
IA
Image And Video Gallery With Thumbnails
Wpdevart
6.1
1 CVEs0 on KEV0 new
SC
Social Comments
Wpdevart
4.8
1 CVEs0 on KEV0 new
YE
YouTube Embed, Playlist and Popup by WpDevArt
wpdevart
6.4
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-16495
CT
Countdown Timer – Widget Countdown
wpdevart
6.4
0%
Oct 14Countdown Timer – Widget Countdown <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect_url' Shortcode Attribute
CVE-2026-73395
BC
Booking calendar, Appointment Booking System
wpdevart
6.5
0%
Aug 18WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-8840
BC
Booking calendar, Appointment Booking System
wpdevart
5.3
1%
Aug 15Booking calendar, Appointment Booking System <= 3.2.36 - Missing Authorization to Unauthenticated Arbitrary Modification via wpdevart_payment AJAX Action
CVE-2026-57778
BC
Booking calendar, Appointment Booking System
wpdevart
5.3
0%
Jul 13WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Broken Access Control vulnerability
CVE-2026-15289
BC
Booking calendar, Appointment Booking System
wpdevart
5.9
0%
Jul 10Booking calendar, Appointment Booking System <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id'
CVE-2026-24597
OC
Organization chart
WpDevArt
4.3
0%
May 25WordPress Organization chart plugin <= 1.7.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2022-50959
CF
Contact Form Builder
wpdevart
6.1
0%
May 10WordPress Contact Form Builder 1.6.1 Cross-Site Scripting via code_generator.php
CVE-2026-25435
BC
Booking calendar, Appointment Booking System
wpdevart
7.1
0%
Mar 25WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Cross Site Scripting (XSS) vulnerability
CVE-2025-14555
CT
Countdown Timer – Widget Countdown
wpdevart
6.4
0%
Jan 10Countdown Timer - Widget Countdown <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-67574
BC
Booking calendar, Appointment Booking System
wpdevart
5.3
0%
Dec 9WordPress Booking calendar, Appointment Booking System plugin <= 3.2.30 - Broken Access Control vulnerability
CVE-2025-62886
PT
Pricing Table builder
wpdevart
7.1
0%
Oct 27WordPress Pricing Table builder plugin <= 1.5.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-2537
YE
YouTube Embed, Playlist and Popup by WpDevArt
wpdevart
6.4
0%
Jul 3Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript Library
CVE-2025-47443
WC
Widget Countdown
wpdevart
6.5
0%
May 7WordPress Widget Countdown plugin <= 2.7.4 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-24719
WC
Widget Countdown
wpdevart
6.5
0%
Jan 24WordPress Widget Countdown plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-12077
BC
Booking calendar, Appointment Booking System
wpdevart
6.1
0%
Jan 7Booking Calendar and Booking Calendar Pro <= Multiple Versions - Reflected Cross-Site Scripting via 'calendar_id'
CVE-2023-45631
RI
Responsive Image Gallery, Gallery Album
wpdevart
5.4
0%
Jan 2WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerability
CVE-2024-10856
BC
Booking calendar, Appointment Booking System
wpdevart
6.5
0%
Dec 24Booking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL Injection
CVE-2023-24407
BC
Booking calendar, Appointment Booking System
WpDevArt
8.8
1%
Dec 9WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Broken Access Control vulnerability
CVE-2024-9504
BC
Booking calendar, Appointment Booking System
wpdevart
7.2
0%
Nov 26Booking calendar, Appointment Booking System <= 3.2.15 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
CVE-2024-7355
OC
Organization chart
wpdevart
5.4
0%
Aug 7Organization chart <= 1.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via title_input and node_description Parameters
CVE-2024-37542
RI
Responsive Image Gallery, Gallery Album
WpDevArt
6.3
0%
Jul 6WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerability
CVE-2024-35747
CF
Contact Form Builder, Contact Widget
wpdevart
5.3
0%
Jun 10WordPress Contact Form Builder, Contact Widget plugin <= 2.1.7 - Bypass Vulnerability vulnerability
CVE-2024-35750
RI
Responsive Image Gallery, Gallery Album
wpdevart
8.8
0%
Jun 8WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - SQL Injection vulnerability
CVE-2023-49741
CS
Coming soon and Maintenance mode
wpdevart
3.7
0%
Jun 4WordPress Coming soon and Maintenance mode plugin <= 3.7.3 - IP Filtering Bypass vulnerability
CVE-2023-24373
BC
Booking calendar, Appointment Booking System
WpDevArt
9.8
0%
Jun 3WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Bypass vulnerability
CVE-2024-30550
RI
Responsive Image Gallery, Gallery Album
wpdevart
6.1
0%
Mar 31WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-31120
RI
Responsive Image Gallery, Gallery Album
wpdevart
5.4
0%
Mar 31WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability
CVE-2023-47533
CA
Countdown And Countup, Woocommerce Sales Timer
Wpdevart
4.8
0%
Nov 14Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Countdown and CountUp, WooCommerce Sales Timer plugin <= 1.8.2 versions
CVE-2022-47428
BC
Booking Calendar
Wpdevart
9.8
1%
Nov 6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WpDevArt Booking calendar, Appointment Booking System allows SQL…
CVE-2023-46075
CF
Contact Form Builder
Wpdevart
6.1
0%
Oct 26Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wpdevart Contact Form Builder, Contact Widget plugin <= 2.1.6 versions
CVE-2023-45630
GA
Gallery
Wpdevart
6.1
0%
Oct 18Unauth. Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 versions
CVE-2023-45629
GI
Gallery - Image And Video Gallery With Thumbnails
Wpdevart
8.8
0%
Oct 16Cross-Site Request Forgery (CSRF) vulnerability in wpdevart Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 versions
CVE-2023-0900
PT
Pricing Table Builder
Wpdevart
7.2
3%
Jun 5The Pricing Table Builder WordPress plugin through 1.1.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection…
CVE-2023-24387
OC
Organization Chart
Wpdevart
4.8
0%
Apr 6Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart Organization chart plugin <= 1.4.4 versions
CVE-2023-24004
DI
Download Image And Video Lightbox, Image Popup
Wpdevart
4.8
0%
Apr 6Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart Image and Video Lightbox, Image PopUp plugin <= 2.1.5 versions
CVE-2023-24002
YE
Youtube Embed, Playlist And Popup
Wpdevart
4.8
0%
Apr 6Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart YouTube Embed, Playlist and Popup by WpDevArt plugin <= 2.6.3 versions
CVE-2023-23972
SL
Social Like Box And Page
Wpdevart
4.8
0%
Apr 6Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Smplug-in Social Like Box and Page by WpDevArt plugin <= 0.8.39 versions
CVE-2023-23870
RV
Responsive Vertical Icon Menu
Wpdevart
4.8
0%
Apr 4Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Responsive Vertical Icon Menu plugin <= 1.5.8 versions
CVE-2022-47603
IA
Image And Video Gallery With Thumbnails
Wpdevart
6.1
0%
Mar 29Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wpdevart Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.1 versions
CVE-2022-47438
BC
Booking Calendar
Wpdevart
5.4
0%
Mar 29Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin <= 3.2.3 versions
CVE-2023-23983
RV
Responsive Vertical Icon Menu
Wpdevart
5.4
0%
Feb 28Cross-Site Request Forgery (CSRF) vulnerability in wpdevart Responsive Vertical Icon Menu plugin <= 1.5.8 can lead to theme deletion
CVE-2023-24384
OC
Organization Chart
Wpdevart
8.8
0%
Feb 23Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Organization chart <= 1.4.4 versions
CVE-2023-24388
BC
Booking Calendar
Wpdevart
5.4
0%
Feb 17Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin <= 3.2.3 versions affects plugin forms actions (create, duplicate,…
CVE-2023-0177
SL
Social Like Box And Page
Wpdevart
5.4
0%
Feb 13The Social Like Box and Page by WpDevArt WordPress plugin before 0.8.41 does not validate and escape some of its shortcode attributes before outputting them back in a page/post…
CVE-2022-3982
BC
Booking Calendar
Wpdevart
9.8
5%
Dec 12The Booking calendar, Appointment Booking System WordPress plugin before 3.2.2 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files,…
CVE-2022-34656
PS
Poll, Survey, Questionnaire And Voting System
Wpdevart
4.8
1%
Sep 6Authenticated (admin+) Cross-Site Scripting (XSS) vulnerability in wpdevart Poll, Survey, Questionnaire and Voting system plugin <= 1.7.4 at WordPress
CVE-2022-1946
GA
Gallery
Wpdevart
6.1
2%
Jul 4The Gallery WordPress plugin before 2.0.0 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action (available to both unauthenticated…
CVE-2022-0876
SC
Social Comments
Wpdevart
4.8
1%
Apr 25The Social comments by WpDevArt WordPress plugin before 2.5.0 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site…
CVE-2022-0640
PT
Pricing Table Builder
Wpdevart
6.1
1%
Mar 21The Pricing Table Builder WordPress plugin before 1.1.5 does not sanitize and escape the postid parameter before outputting it back in an admin page, leading to a Reflected…
CVE-2022-0199
CS
Coming Soon And Maintenance Mode
Wpdevart
4.3
0%
Feb 21The Coming soon and Maintenance mode WordPress plugin before 3.6.8 does not have CSRF check in its coming_soon_send_mail AJAX action, allowing attackers to make logged in admin to…
CVE-2022-0164
CS
Coming Soon And Maintenance Mode
Wpdevart
4.3
0%
Feb 21The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not have authorisation and CSRF checks in its coming_soon_send_mail AJAX action, allowing any authenticated…
CVE-2021-25075
DP
Duplicate Page OR Post
Wpdevart
3.5
1%
Feb 21The Duplicate Page or Post WordPress plugin before 1.5.1 does not have any authorisation and has a flawed CSRF check in the wpdevart_duplicate_post_parametrs_save_in_db AJAX…
CVE-2021-24577
CS
Coming Soon And Maintenance Mode
Wpdevart
5.4
1%
Oct 11The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not properly sanitize inputs submitted by authenticated users when setting adding or modifying coming soon…
CVE-2021-34636
CA
Countdown And Countup, Woocommerce Sales Timer
Wpdevart
8.8
1%
Sep 28The Countdown and CountUp, WooCommerce Sales Timers WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_theme function found in the…
CVE-2021-24464
YE
Youtube Embed, Playlist And Popup
Wpdevart
5.4
1%
Aug 2The YouTube Embed, Playlist and Popup by WpDevArt WordPress plugin before 2.3.9 did not escape, validate or sanitise some of its shortcode options, available to users with a role…
CVE-2021-24442
PS
Poll, Survey, Questionnaire And Voting System
Wpdevart
9.8
46%
Jul 12The Poll, Survey, Questionnaire and Voting system WordPress plugin before 1.5.3 did not sanitise, escape or validate the date_answers[] POST parameter before using it in a SQL…
CVE-2018-10363
BC
Booking Calendar
Wpdevart
7.5
1%
Jun 13An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress
CVE-2017-14125
RI
Responsive Image Gallery Gallery Album
Wpdevart
9.8
3%
Sep 25SQL injection vulnerability in the Responsive Image Gallery plugin before 1.2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the "id" parameter in…