Stiofan
9 CVEs across 5 Stiofan products. Browse Stiofan vulnerabilities, severities, and proof-of-concept exploits.
Stiofan products with known CVEs
Stiofan CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-39532 | High | 8.8 | 2026-06-15 | Contributor PHP Object Injection in Events Calendar for GeoDirectory <= 2.3.25 versions. |
CVE-2026-49064 | High | 7.5 | 2026-06-15 | Insertion of Sensitive Information Into Sent Data vulnerability in Stiofan GetPaid allows Retrieve Embedded Sensitive Data.
This issue affects GetPaid: from n… |
CVE-2026-25015 | Medium | 4.3 | 2026-02-03 | Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This issue affects UsersWP: from n/a through <= 1… |
CVE-2025-67593 | Medium | 4.3 | 2025-12-09 | Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This issue affects UsersWP: from n/a through <= 1… |
CVE-2025-66072 | Medium | 5.3 | 2025-11-21 | Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Users… |
CVE-2025-30951 | Medium | 6.5 | 2025-06-06 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan BlockStrap Page Builder - Bootstrap Blocks blocks… |
CVE-2025-26967 | High | 8.8 | 2025-03-03 | Deserialization of Untrusted Data vulnerability in Stiofan Events Calendar for GeoDirectory events-for-geodirectory allows Object Injection.This issue affects… |
CVE-2024-56255 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in Stiofan AyeCode Connect ayecode-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2024-43973 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Stiofan GetPaid invoicing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Get… |