webdevstudios vulnerabilities
6 published CVEs name webdevstudios among the affected products.
- 6Published CVEs6 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-24535
WordPress Automatic Featured Images from Videos plugin <= 1.2.7 - Broken Access Control vulnerability
webdevstudios · Automatic Featured Images from Videos
Medium4.3 - CVE-2025-14056
Custom Post Type UI <= 1.18.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'label' Import Parameter
webdevstudios · Custom Post Type UI
Medium4.4 - CVE-2025-12826
Custom Post Type UI <= 1.18.0 - Missing Authorization to Unauthenticated (Previously Administrator+) Custom Post Type Modification
webdevstudios · Custom Post Type UI
Medium4.8 - CVE-2025-48101
WordPress Constant Contact for WordPress Plugin <= 4.1.1 - PHP Object Injection Vulnerability
webdevstudios · Constant Contact for WordPress
High8.8 - CVE-2025-31820
WordPress Automatic Featured Images from Videos plugin <= 1.2.4 - Broken Access Control vulnerability
webdevstudios · Automatic Featured Images from Videos
Medium4.3 - CVE-2015-10013
WebDevStudios taxonomy-switcher Plugin taxonomy-switcher.php taxonomy_switcher_init cross site scripting
WebDevStudios · taxonomy-switcher Plugin
Low3.5