Log in Start free

Saad Iqbal

Products

ProductCVEsExploitedLatest
myCred11–Jul 13, 2026
WP EasyPay6–Oct 30, 2026
New User Approve4–Mar 25, 2026
License Manager for WooCommerce4–Aug 18, 2026
Post SMTP4–Dec 9, 2025
AppExperts3–Jan 22, 2026
APIExperts Square for WooCommerce3–Jul 13, 2026
Quick Contact Form2–Dec 9, 2025
All In One Login2–Oct 30, 2026
Post Snippets2–Mar 25, 2026
User Management2–Jan 15, 2025
WPExperts Square For GiveWP1–Oct 6, 2024
Bookify1–Aug 20, 2025
Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder1–Aug 6, 2026
Gutena Kit – Gutenberg Blocks and Templates1–Apr 1, 2025
myCred Elementor1–Oct 24, 2024
User Avatar - Reloaded1–Dec 16, 2025
Advanced File Manager1–May 7, 2025

Exploited and recent CVEs

  • CVE-2026-94175 High 7.1 WordPress All In One Login plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-39734 High 7.5 WordPress WP EasyPay plugin <= 4.5.4 - Path Traversal vulnerability 0.5%
  • CVE-2026-84762 Medium 5.3 WordPress WP EasyPay plugin <= 4.5.3 - Bypass Vulnerability vulnerability 0.3%
  • CVE-2026-73345 High 7.1 WordPress License Manager for WooCommerce plugin <= 3.0.18 - SQL Injection vulnerability 0.3%
  • CVE-2026-66425 Medium 6.5 WordPress Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin <= 1.9.0 - Broken Authentication vulnerability 0.4%
  • CVE-2026-57808 Medium 6.5 WordPress WP EasyPay plugin <= 4.5.0 - Arbitrary Content Deletion vulnerability 0.3%
  • CVE-2026-61968 Medium 5.4 WordPress myCred plugin <= 3.1.2 - Broken Access Control vulnerability 0.3%
  • CVE-2026-61958 Medium 5.4 WordPress License Manager for WooCommerce plugin <= 3.0.17 - Arbitrary Content Deletion vulnerability 0.3%
  • CVE-2026-57810 High 8.5 WordPress APIExperts Square for WooCommerce plugin <= 4.7.4 - SQL Injection vulnerability 0.4%
  • CVE-2026-54848 High 8.3 WordPress APIExperts Square for WooCommerce plugin <= 4.7.3 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2026-56024 Medium 6.5 WordPress WP EasyPay plugin <= 4.5.0 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2026-45215 Medium 5.3 WordPress WP EasyPay plugin <= 4.3.0 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-45211 High 8.5 WordPress APIExperts Square for WooCommerce plugin <= 4.7.1 - SQL Injection vulnerability 0.2%
  • CVE-2026-25390 Medium 6.5 WordPress New User Approve plugin <= 3.2.3 - Broken Access Control vulnerability 0.3%
  • CVE-2026-25001 High 8.5 WordPress Post Snippets plugin <= 4.0.12 - Remote Code Execution (RCE) vulnerability 0.2%
  • CVE-2026-32587 Medium 5.4 WordPress WP EasyPay plugin <= 4.2.11 - Broken Access Control vulnerability 0.2%
  • CVE-2025-69063 High 8.6 WordPress New User Approve plugin <= 3.2.0 - Broken Access Control vulnerability 0.3%
  • CVE-2026-27440 Medium 6.5 WordPress myCred plugin <= 2.9.7.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-24951 Medium 4.3 WordPress myCred plugin <= 2.9.7.3 - Broken Access Control vulnerability 0.2%
  • CVE-2025-68881 High 8.5 WordPress AppExperts plugin <= 1.4.5 - SQL Injection vulnerability 0.3%
  • CVE-2025-63040 Medium 4.3 WordPress Post Snippets plugin <= 4.0.11 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-68080 Medium 6.5 WordPress User Avatar - Reloaded plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-63030 High 7.1 WordPress New User Approve plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-67563 Medium 5.3 WordPress Post SMTP plugin <= 3.6.1 - Broken Access Control vulnerability 0.3%
  • CVE-2025-67471 Medium 4.3 WordPress Quick Contact Form plugin <= 8.2.5 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-58595 Medium 5.3 WordPress All In One Login plugin <= 2.0.8 - Bypass Vulnerability vulnerability 0.4%
  • CVE-2025-53218 Medium 5.8 WordPress AppExperts plugin <= 1.4.5 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2025-58788 High 7.6 WordPress License Manager for WooCommerce Plugin <= 3.0.12 - SQL Injection Vulnerability 0.4%
  • CVE-2025-48142 High 8.8 WordPress Bookify <= 1.0.9 - Privilege Escalation Vulnerability 0.4%
  • CVE-2025-54668 Medium 6.5 WordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) Vulnerability 0.2%