wedevs vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20221
3. 202311
4. 202425
5. 202526
6. 202670

Newest CVEs

• CVE-2026-120531

  Subscribe2 – Form, Email Subscribers & Newsletters <= 10.47 - Unauthenticated Stored Cross-Site Scripting via 'data[ip]' Parameter

  wedevs · Subscribe2 – Form, Email Subscribers & Newsletters

  High7.2
• CVE-2026-109214

  User Frontend <= 4.3.13 - Unauthenticated Stored Cross-Site Scripting via Taxonomy Field Text-Input

  wedevs · User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

  High7.2
• CVE-2026-104760

  weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'modalPlaceholder' Block Attribute

  wedevs · weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot

  Medium6.4
• CVE-2026-121767

  WordPress weDocs plugin <= 2.6.1 - Broken Access Control vulnerability

  weDevs · weDocs

  Medium5.3
• CVE-2026-121993

  wePOS before 2.0.3 Missing Authorization via payment/process Endpoint

  wedevs · wePOS – Point Of Sale (POS) for WooCommerce & Dokan

  Medium5.3
• CVE-2026-119485

  WordPress Dokan plugin <= 5.3.2 - Broken Access Control vulnerability

  weDevs · Dokan

  Medium5.3
• CVE-2026-119487

  WordPress Dokan plugin <= 5.3.2 - Broken Access Control vulnerability

  weDevs · Dokan

  Medium5.3
• CVE-2026-120070

  User Frontend <= 4.3.13 - Authenticated (Subscriber+) Privilege Escalation via post_content Parameter

  wedevs · User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

  High8.8
• CVE-2026-116512

  Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injection

  wedevs · Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker

  Critical9.8
• CVE-2026-103962

  User Frontend <= 4.3.13 - Reflected Cross-Site Scripting via 'field_attr[required]' Parameter

  wedevs · User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

  Medium6.1