Fullworksplugins 14 CVEs across 5 Fullworksplugins products. Browse Fullworksplugins vulnerabilities, severities, and proof-of-concept exploits.
Fullworksplugins products with known CVEs Fullworksplugins CVEs — newest first CVE Severity Score Published Summary CVE-2025-4302Medium 5.32025-07-17 The Stop User Enumeration WordPress plugin before version 1.7.3 blocks REST API /wp-json/wp/v2/users/ requests for non-authorized users. However, this can be b… CVE-2023-1554Medium 4.82023-05-02 The Quick Paypal Payments WordPress plugin before 5.7.26.4 does not sanitise and escape some of its settings, which could allow high privilege users such as ad… CVE-2023-23889Medium 6.52023-04-25 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions. CVE-2022-47608Medium 5.92023-04-25 Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Contact Form plugin <= 8.0.3.1 versions. CVE-2023-25713High 7.12023-04-07 Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions. CVE-2023-25702Medium 5.92023-04-07 Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions. CVE-2023-23885Medium 6.52023-04-07 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Contact Form plugin <= 8.0.3.1 versions. CVE-2023-23979High 7.12023-04-06 Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 versions. CVE-2022-46863Medium 5.92023-03-28 Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Event Manager plugin <= 9.6.4 versions. CVE-2023-23974Medium 4.32023-03-01 Cross-Site Request Forgery (CSRF) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 affecting all registration actions (delete, delete all, edit… CVE-2023-23491Medium 6.12023-01-20 The Quick Event Manager WordPress Plugin, version < 9.7.5, is affected by a reflected cross-site scripting vulnerability in the 'category' parameter of its 'qe… CVE-2022-37339Medium 4.12022-09-23 Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Meet My Team plugin <= 2.0.5 at WordPress. CVE-2017-18536Medium 6.12019-08-21 The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS. CVE-2017-1000226Medium 5.32017-11-17 Stop User Enumeration 1.3.8 allows user enumeration via the REST API