Log in Start free

WeDevs

Products

ProductCVEsExploitedLatest
WP User Frontend15–Oct 29, 2026
Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker12–Oct 31, 2026
WP ERP11–Oct 29, 2026
WP Project Manager9–Oct 1, 2026
ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support8–Jul 11, 2024
Dokan Pro7–Jul 23, 2026
Happy Addons for Elementor6–Oct 29, 2026
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot6–Jul 3, 2026
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce5–Oct 30, 2026
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration5–Jun 9, 2026
weMail4–Jun 26, 2026
WP User Frontend Pro3–Oct 6, 2026
Dokan3–Nov 3, 2026
StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce3–Jul 28, 2026
Subscribe2 – Form, Email Subscribers & Newsletters3–Feb 19, 2025
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission3–Oct 31, 2026
User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration3–Jul 9, 2026
weDocs3–Nov 7, 2026
WooCommerce Conversion Tracking3–Jun 11, 2026
StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart2–Oct 6, 2026
ReCaptcha Integration for WordPress2–Nov 2, 2024
weMail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins for WooCommerce2–Feb 21, 2026
Appsero Helper2–Apr 24, 2025
Subscribe22–Aug 18, 2026
Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy2–Dec 20, 2023
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting1–Jan 8, 2024
WP ERP Pro1–May 22, 2026
Happy Addons for Elementor Pro1–Jan 11, 2024
WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts1–Dec 14, 2023
WP Project Manager Pro1–Aug 25, 2026
wePOS – Point Of Sale (POS) for WooCommerce & Dokan1–Nov 4, 2026
WP Project Manager (WordPress plugin)1–Apr 4, 2022
Happy Addons Pro for Elementor1–May 17, 2021

Exploited and recent CVEs

  • CVE-2026-121767 Medium 5.3 WordPress weDocs plugin <= 2.6.1 - Broken Access Control vulnerability –
  • CVE-2026-121993 Medium 4.3 wePOS before 2.0.3 Missing Authorization via payment/process Endpoint 0.2%
  • CVE-2026-119485 Medium 5.3 WordPress Dokan plugin <= 5.3.2 - Broken Access Control vulnerability 0.2%
  • CVE-2026-119487 Medium 5.3 WordPress Dokan plugin <= 5.3.2 - Broken Access Control vulnerability 0.3%
  • CVE-2026-120070 High 8.8 User Frontend <= 4.3.13 - Authenticated (Subscriber+) Privilege Escalation via post_content Parameter 0.3%
  • CVE-2026-116512 Critical 9.8 Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injection 0.6%
  • CVE-2026-103962 Medium 6.1 User Frontend <= 4.3.13 - Reflected Cross-Site Scripting via 'field_attr[required]' Parameter 0.2%
  • CVE-2026-96894 High 7.2 ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.10 - Unauthenticated Stored Cross-Site Scripting via Inbound Email Body 0.4%
  • CVE-2026-109891 Medium 6.4 WordPress Happy Addons for Elementor plugin <= 3.50.1 - Broken Access Control vulnerability 0.1%
  • CVE-2026-25448 Medium 4.3 WordPress WP ERP plugin <= 1.17.10 - Broken Access Control vulnerability 0.2%
  • CVE-2026-116850 Medium 6.5 WordPress Happy Addons for Elementor plugin <= 3.50.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-52708 Medium 4.3 WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability 0.2%
  • CVE-2026-48884 Medium 5.3 WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability 0.3%
  • CVE-2026-115590 High 7.2 WordPress Dokan plugin <= 5.3.1 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-96574 Medium 6.4 User Frontend <= 4.3.12 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpuf_payment_method' Parameter 0.2%
  • CVE-2026-104393 Medium 6.5 WordPress Happy Addons for Elementor plugin <= 3.50.0 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-39750 High 7.1 WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-32572 High 7.1 WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-97281 Medium 6.3 WordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerability 0.2%
  • CVE-2026-96346 High 7.6 WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability 0.3%
  • CVE-2026-96343 High 7.2 WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-95525 Medium 6.5 WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability 0.5%
  • CVE-2026-95524 Medium 5.3 WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability 0.3%
  • CVE-2026-95523 Medium 6.5 WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability 0.3%
  • CVE-2026-81283 High 8.8 WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerability 0.5%
  • CVE-2026-18080 Critical 9.8 ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment 0.9%
  • CVE-2026-78470 Medium 6.5 WP Project Manager Pro <= 4.0.1 - Authenticated (Subscriber+) SQL Injection 0.4%
  • CVE-2026-78262 Critical 9.8 WordPress WP Project Manager plugin <= 4.0.6 - PHP Object Injection vulnerability 0.6%
  • CVE-2026-73393 High 7.1 WordPress Subscribe2 plugin <= 10.46 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-66466 High 7.5 WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.1.1 - Broken Access Control vulnerability 0.3%