Vulnerabilities in Saad Iqbal

46 results
Vexday analysis

Saad Iqbal apresenta 44 vulnerabilidades catalogadas, com 2 classificadas como críticas, mas nenhuma está sob ataque ativo conhecido. A fraqueza dominante é autorização inadequada (CWE-862), indicando falhas em controle de acesso. Com 7 vulnerabilidades publicadas nos últimos 90 dias, o risco está em evolução moderada, exigindo monitoramento contínuo mas sem indicadores imediatos de exploração em campo.

CVE-2025-24000HIGHWordPress Post SMTP plugin <= 3.2.0 - Account Takeover VulnerabilityEPSS 0.6%CVE-2024-43354CRITICALWordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerabilityEPSS 0.5%CVE-2024-52403CRITICALWordPress User Management plugin <= 1.1 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-52436HIGHWordPress Post SMTP plugin <= 2.9.9 - SQL Injection vulnerabilityEPSS 0.5%CVE-2025-22736HIGHWordPress User Management plugin <= 1.2 - Privilege Escalation vulnerabilityEPSS 0.4%CVE-2024-47338HIGHWordPress WPExperts Square For GiveWP plugin <= 1.3 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-22800MEDIUMWordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-58788HIGHWordPress License Manager for WooCommerce Plugin <= 3.0.12 - SQL Injection VulnerabilityEPSS 0.4%CVE-2025-30609MEDIUMWordPress AppExperts plugin <= 1.4.3 - Sensitive Data Exposure VulnerabilityEPSS 0.4%CVE-2025-48142HIGHWordPress Bookify <= 1.0.9 - Privilege Escalation VulnerabilityEPSS 0.4%CVE-2025-47688MEDIUMWordPress Advanced File Manager plugin <= 5.3.1 - Broken Access Control to Notice Dismissal vulnerabilityEPSS 0.4%CVE-2024-32711MEDIUMWordPress myCred plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-58595MEDIUMWordPress All In One Login plugin <= 2.0.8 - Bypass Vulnerability vulnerabilityEPSS 0.3%CVE-2025-31805MEDIUMWordPress Gutena Kit plugin <= 2.0.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-25390MEDIUMWordPress New User Approve plugin <= 3.2.3 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-54323MEDIUMWordPress New User Approve plugin <= 2.6.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-57808MEDIUMWordPress WP EasyPay plugin <= 4.5.0 - Arbitrary Content Deletion vulnerabilityEPSS 0.3%CVE-2025-67563MEDIUMWordPress Post SMTP plugin <= 3.6.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-53218MEDIUMWordPress AppExperts plugin <= 1.4.5 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2025-32522HIGHWordPress License Manager for WooCommerce plugin <= 3.0.9 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%