[ Vendor · 10 CVEs ]
weDevs
CVEs affecting weDevs published in the last 30 days, plus any weDevs CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-96574 | 10 Oct 2026 | CVSS 6.4 | wedevs User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post SubmissionThe User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for… | |
| CVE-2026-104393 | 7 Oct 2026 | CVSS 6.5 | weDevs Happy Addons for ElementorImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Happy Addons for Elementor… | |
| CVE-2026-39750 | 6 Oct 2026 | CVSS 7.1 | weDevs StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side CartUnauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side… | |
| CVE-2026-32572 | 6 Oct 2026 | CVSS 7.1 | weDevs WP User Frontend ProUnauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions. | |
| CVE-2026-97281 | 1 Oct 2026 | CVSS 6.3 | weDevs WP Project ManagerSubscriber Broken Access Control in WP Project Manager <= 4.0.7 versions. | |
| CVE-2026-96343 | 30 Sep 2026 | CVSS 7.2 | weDevs WP ERPCustom role PHP Object Injection in WP ERP <= 1.17.9 versions. | |
| CVE-2026-96346 | 30 Sep 2026 | CVSS 7.6 | weDevs WP ERPAuthor SQL Injection in WP ERP <= 1.17.9 versions. | |
| CVE-2026-95523 | 23 Sep 2026 | CVSS 6.5 | weDevs WP User FrontendSubscriber Bypass Vulnerability in WP User Frontend <= 4.3.11 versions. | |
| CVE-2026-95524 | 23 Sep 2026 | CVSS 5.3 | weDevs WP User FrontendUnauthenticated Bypass Vulnerability in WP User Frontend <= 4.3.11 versions. | |
| CVE-2026-95525 | 23 Sep 2026 | CVSS 6.5 | weDevs WP User FrontendSubscriber Arbitrary File Deletion in WP User Frontend <= 4.3.11 versions. |