Seventhqueen

11 CVEs across 8 Seventhqueen products. Browse Seventhqueen vulnerabilities, severities, and proof-of-concept exploits.

Seventhqueen products with known CVEs

ProductCVEs
Kleo3
K Elements2
Sweet Date2
Buddyapp1
Restrictions For Buddypress1
Sweetdate Core1
Typer Core1
Typer Core1
Seventhqueen CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-69140High7.12026-06-17Unauthenticated Cross Site Scripting (XSS) in SweetDate Core < 1.1.5 versions.
CVE-2026-27417Critical9.82026-03-05Deserialization of Untrusted Data vulnerability in SeventhQueen Sweet Date sweetdate allows Object Injection.This issue affects Sweet Date: from n/a through <…
CVE-2026-22465High7.12026-03-05Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SeventhQueen BuddyApp buddyapp allows Reflected XSS.This…
CVE-2025-12391Medium5.32025-11-18The Restrictions for BuddyPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_optin_o…
CVE-2025-64363High7.52025-10-31Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SeventhQueen Kleo kleo allows PHP Loca…
CVE-2025-64362Medium6.52025-10-31Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SeventhQueen K Elements k-elements allows DOM-Based XSS.T…
CVE-2025-39367Medium5.32025-04-28Missing Authorization vulnerability in SeventhQueen Kleo kleo.This issue affects Kleo: from n/a through < 5.4.4.
CVE-2024-56000Critical9.82025-02-18Incorrect Privilege Assignment vulnerability in SeventhQueen K Elements k-elements allows Privilege Escalation.This issue affects K Elements: from n/a through…
CVE-2024-12102Medium4.32025-01-30The Typer Core plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.9.6 via the 'elementor-template' shortcode du…
CVE-2024-56209High7.12024-12-31Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SeventhQueen Kleo kleo allows Reflected XSS.This issue af…
CVE-2024-43222Critical9.82024-12-09Missing Authorization vulnerability in SeventhQueen Sweet Date sweetdate allows Privilege Escalation.This issue affects Sweet Date: from n/a through <= 3.7.3.