[ Vendor · 5 CVEs ]
wpdevteam
CVEs affecting wpdevteam published in the last 30 days, plus any wpdevteam CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-109985 | 17 Oct 2026 | CVSS 6.4 | wpdevteam xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDNThe xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… | |
| CVE-2026-109513 | 16 Oct 2026 | CVSS 7.2 | wpdevteam NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification BarThe NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar… | |
| CVE-2026-110721 | 16 Oct 2026 | CVSS 5.3 | wpdevteam NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification BarThe NotificationX plugin for WordPress is vulnerable to Missing Authorization leading to arbitrary content injection in versions up to, and… | |
| CVE-2026-92727 | 3 Oct 2026 | CVSS 6.4 | wpdevteam EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documentsThe EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents plugin for WordPress is vulnerable to… | |
| CVE-2026-96256 | 1 Oct 2026 | CVSS 6.4 | wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & PatternsThe Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… |