Vulnerabilities in wedevs
134 resultsCVE-2026-103962MEDIUMUser Frontend <= 4.3.13 - Reflected Cross-Site Scripting via 'field_attr[required]' ParameterEPSS 0.2%CVE-2026-96574MEDIUMUser Frontend <= 4.3.12 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpuf_payment_method' ParameterEPSS 0.2%CVE-2026-2233MEDIUMUser Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Post Modification via 'post_id' ParameterEPSS 0.2%CVE-2026-39520MEDIUMWordPress weDocs plugin <= 2.1.18 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-24944MEDIUMWordPress Subscribe2 plugin <= 10.44 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-42412MEDIUMWordPress WP User Frontend plugin <= 4.3.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-121767MEDIUMWordPress weDocs plugin <= 2.6.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-116850MEDIUMWordPress Happy Addons for Elementor plugin <= 3.50.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-32280MEDIUMWordPress WP Project Manager plugin < 2.6.25 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%CVE-2026-4058MEDIUMUser Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.2 - Missing Authorization to Authenticated (Subscriber+) Subscription Pack CancellationEPSS 0.2%CVE-2024-13436MEDIUMAppsero Helper <= 1.3.2 - Cross-Site Request Forgery to Stored Cross-Site ScriptingEPSS 0.1%CVE-2026-109891MEDIUMWordPress Happy Addons for Elementor plugin <= 3.50.1 - Broken Access Control vulnerabilityEPSS 0.1%CVE-2026-104393MEDIUMWordPress Happy Addons for Elementor plugin <= 3.50.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2022-47150MEDIUMWordPress WooCommerce Conversion Tracking plugin <= 2.0.10 - Cross-Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%