Vulnerabilities in webfactory
29 resultsCVE-2025-10645MEDIUMWP Reset <= 2.05 - Unauthenticated Sensitive Information Exposure via wf-licensing.logEPSS 0.3%CVE-2024-4661MEDIUMWP Reset <= 2.02 - Missing Authorization to License Key ModificationEPSS 0.3%CVE-2024-13362MEDIUMFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterEPSS 0.3%CVE-2024-1501MEDIUMDatabase Reset <= 3.22 - Cross-Site Request Forgery to WP Reset Plugin InstallationEPSS 0.3%CVE-2026-100518MEDIUMWordPress Advanced Google reCAPTCHA plugin <= 5.40 - Broken Authentication vulnerabilityEPSS 0.3%CVE-2023-0831MEDIUMUnder Construction <= 3.96 - Cross-Site Request Forgery via admin_action_ucp_dismiss_noticeEPSS 0.2%CVE-2023-0832MEDIUMUnder Construction <= 3.96 - Cross-Site Request Forgery via admin_action_install_weglotEPSS 0.2%CVE-2026-94457MEDIUMWordPress Captcha Code plugin <= 3.32 - Bypass Vulnerability vulnerabilityEPSS 0.2%CVE-2026-97308MEDIUMWordPress Login Lockdown plugin <= 2.17 - Bypass Vulnerability vulnerabilityEPSS 0.2%