WP
Vendor
wphocus
9
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116855 New | MA My auctions allegro wphocus | 5.4 | Oct 28 | WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability |
| CVE-2026-22491 | MA My auctions allegro wphocus | 7.1 | Mar 25 | WordPress My auctions allegro plugin <= 3.6.35 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-22464 | MA My auctions allegro wphocus | 7.5 | Jan 22 | WordPress My auctions allegro plugin <= 3.6.33 - Local File Inclusion vulnerability |
| CVE-2025-67943 | MA My auctions allegro wphocus | 7.1 | Jan 22 | WordPress My auctions allegro plugin <= 3.6.32 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-68567 | MA My auctions allegro wphocus | 5.4 | Dec 24 | WordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2025-68566 | MA My auctions allegro wphocus | 5.9 | Dec 24 | WordPress My auctions allegro plugin <= 3.6.35 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-12851 | MA My auctions allegro wphocus | 8.1 | Dec 5 | My auctions allegro <= 3.6.32 - Unauthenticated Local File Inclusion via controller |
| CVE-2025-12850 | MA My auctions allegro wphocus | 7.5 | Dec 5 | My auctions allegro <= 3.6.32 - Unauthenticated SQL Injection via auction_id |
| CVE-2025-10048 | MA My auctions allegro wphocus | 4.9 | Oct 11 | My Auctions Allegro Plugin <= 3.6.31 - Authenticated (Admin+) SQL Injection |