webfactory vulnerabilities
29 published CVEs name webfactory among the affected products.
- 29Published CVEs29 of them scored
- 9Last 12 monthspublished in the last year
- 1Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-100518
WordPress Advanced Google reCAPTCHA plugin <= 5.40 - Broken Authentication vulnerability
WebFactory · Advanced Google reCAPTCHA
Medium5.3 - CVE-2026-97308
WordPress Login Lockdown plugin <= 2.17 - Bypass Vulnerability vulnerability
WebFactory · Login Lockdown
Medium4.8 - CVE-2026-94457
WordPress Captcha Code plugin <= 3.32 - Bypass Vulnerability vulnerability
WebFactory · Captcha Code
Medium4.8 - CVE-2026-94174
WordPress Email Log plugin <= 2.63 - SQL Injection vulnerability
WebFactory · Email Log
High7.6 - CVE-2026-11426
UnderConstructionPage PRO <= 5.76 - Authenticated (Subscriber+) Arbitrary File Read via template_thumbnail Parameter
WebFactory · Under Construction Page (Pro)
Medium6.5 - CVE-2026-5411
WP Captcha PRO <= 5.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload
webfactory · Advanced Google reCAPTCHA
High8.8 - CVE-2026-5415
WP Captcha PRO <= 5.38 - Authenticated (Subscriber+) Authentication Bypass via Temporary Login Link
webfactory · Advanced Google reCAPTCHA
High8.8 - CVE-2024-13362
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
sebet · Go Fetch Jobs (for WP Job Manager)
Medium6.1 - CVE-2025-11707
Login Lockdown & Protection <= 2.14 - IP Block Bypass
webfactory · Login Lockdown & Protection
Medium5.3 - CVE-2025-10645
WP Reset <= 2.05 - Unauthenticated Sensitive Information Exposure via wf-licensing.log
webfactory · WP Reset
Medium5.3