Log in Start free

WPExperts

Products

ProductCVEsExploitedLatest
APIExperts Square for WooCommerce4–Oct 30, 2026
Post SMTP2–Aug 31, 2026
Wholesale For WooCommerce2–Apr 10, 2024
Password Protected1–Jun 23, 2023
Advanced File Manager1–Oct 18, 2026
WP EasyPay1–Oct 15, 2026
CF7 Apps1–Oct 1, 2026
Gravity Forms Bookings premium1–Aug 18, 2026

Exploited and recent CVEs

  • CVE-2026-119466 Medium 5.4 WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2026-115959 Medium 5.3 WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability 0.2%
  • CVE-2026-115960 Medium 4.3 WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability 0.2%
  • CVE-2026-110365 Medium 6.5 WordPress Advanced File Manager plugin <= 5.4.14 - Broken Access Control vulnerability 0.3%
  • CVE-2026-96449 Medium 5.3 WordPress WP EasyPay plugin <= 4.5.4 - Broken Access Control vulnerability 0.2%
  • CVE-2026-110367 Medium 5.3 WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability 0.2%
  • CVE-2026-62058 Medium 5.3 WordPress CF7 Apps plugin <= 3.7.2 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-81278 Medium 5.4 WordPress Post SMTP plugin 4.0.0-beta.1 - Settings Change vulnerability 0.3%
  • CVE-2026-32466 High 8.5 WordPress Gravity Forms Bookings premium plugin <= 2.1 - SQL Injection vulnerability 0.4%
  • CVE-2026-48838 High 7.1 WordPress Post SMTP plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-31297 High 7.5 WordPress Wholesale For WooCommerce plugin <= 2.3.1 - Unauthenticated Arbitrary Post/Page vulnerability 0.4%
  • CVE-2024-30469 Medium 5.3 WordPress Wholesale For WooCommerce plugin <= 2.3.0 - Unauthenticated Sensitive Data Exposure vulnerability 0.4%
  • CVE-2023-32580 Medium 5.9 WordPress Password Protected Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS) 0.4%