wedevs vulnerabilities
138 published CVEs name wedevs among the affected products.
- 138Published CVEs138 of them scored
- 80Last 12 monthspublished in the last year
- 4Critical44 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-126808
WP ERP through 1.17.11 Incorrect Authorization via HRM Job-Info AJAX Handlers
weDevs · ERP
Medium5.3 - CVE-2026-124269
WordPress Happy Addons for Elementor plugin <= 3.51.0 - Broken Access Control vulnerability
weDevs · Happy Addons for Elementor
Medium4.3 - CVE-2026-123473
WordPress Happy Addons for Elementor plugin <= 3.51.0 - Cross Site Scripting (XSS) vulnerability
weDevs · Happy Addons for Elementor
Medium6.5 - CVE-2026-121760
WordPress weDocs plugin <= 2.6.1 - Broken Access Control vulnerability
weDevs · weDocs
High7.5 - CVE-2026-120531
Subscribe2 – Form, Email Subscribers & Newsletters <= 10.47 - Unauthenticated Stored Cross-Site Scripting via 'data[ip]' Parameter
wedevs · Subscribe2 – Form, Email Subscribers & Newsletters
High7.2 - CVE-2026-109214
User Frontend <= 4.3.13 - Unauthenticated Stored Cross-Site Scripting via Taxonomy Field Text-Input
wedevs · User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission
High7.2 - CVE-2026-104760
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'modalPlaceholder' Block Attribute
wedevs · weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot
Medium6.4 - CVE-2026-121767
WordPress weDocs plugin <= 2.6.1 - Broken Access Control vulnerability
weDevs · weDocs
Medium5.3 - CVE-2026-121993
wePOS before 2.0.3 Missing Authorization via payment/process Endpoint
wedevs · wePOS – Point Of Sale (POS) for WooCommerce & Dokan
Medium5.3 - CVE-2026-119485
WordPress Dokan plugin <= 5.3.2 - Broken Access Control vulnerability
weDevs · Dokan
Medium5.3