Stiofan

9 CVEs across 5 Stiofan products. Browse Stiofan vulnerabilities, severities, and proof-of-concept exploits.

Stiofan products with known CVEs

ProductCVEs
Userswp3
Events Calendar For Geodirectory2
Getpaid2
Ayecode Connect1
Blockstrap Page Builder - Bootstrap Blocks1
Stiofan CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-39532High8.82026-06-15Contributor PHP Object Injection in Events Calendar for GeoDirectory <= 2.3.25 versions.
CVE-2026-49064High7.52026-06-15Insertion of Sensitive Information Into Sent Data vulnerability in Stiofan GetPaid allows Retrieve Embedded Sensitive Data. This issue affects GetPaid: from n…
CVE-2026-25015Medium4.32026-02-03Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This issue affects UsersWP: from n/a through <= 1…
CVE-2025-67593Medium4.32025-12-09Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This issue affects UsersWP: from n/a through <= 1…
CVE-2025-66072Medium5.32025-11-21Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Users…
CVE-2025-30951Medium6.52025-06-06Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan BlockStrap Page Builder - Bootstrap Blocks blocks…
CVE-2025-26967High8.82025-03-03Deserialization of Untrusted Data vulnerability in Stiofan Events Calendar for GeoDirectory events-for-geodirectory allows Object Injection.This issue affects…
CVE-2024-56255Medium4.32025-01-02Missing Authorization vulnerability in Stiofan AyeCode Connect ayecode-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…
CVE-2024-43973Medium4.32024-11-01Missing Authorization vulnerability in Stiofan GetPaid invoicing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Get…