Webdevstudios
6 CVEs across 8 Webdevstudios products. Browse Webdevstudios vulnerabilities, severities, and proof-of-concept exploits.
Webdevstudios products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-24535 | Medium | 4.3 | 2026-01-23 | Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos allows Exploiting Incorrectly… |
CVE-2025-14056 | Medium | 4.4 | 2025-12-13 | The Custom Post Type UI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'label' parameter during custom post type import in all versi… |
CVE-2025-12826 | Medium | 4.8 | 2025-12-04 | The Custom Post Type UI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.18.0. This is due to the plugin not… |
CVE-2025-48101 | High | 8.8 | 2025-09-09 | Deserialization of Untrusted Data vulnerability in webdevstudios Constant Contact for WordPress allows Object Injection. This issue affects Constant Contact fo… |
CVE-2025-31820 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos allows Exploiting Incorrectly… |
CVE-2015-10120 | Low | 3.5 | 2023-07-10 | A vulnerability, which was classified as problematic, was found in WDS Multisite Aggregate Plugin up to 1.0.0 on WordPress. Affected is the function update_opt… |
CVE-2023-1623 | Medium | 6.5 | 2023-04-24 | The Custom Post Type UI WordPress plugin before 1.13.5 does not properly check for CSRF when sending the debug information to a user supplied email, which coul… |
CVE-2015-10013 | Low | 3.5 | 2023-01-05 | A vulnerability was found in WebDevStudios taxonomy-switcher Plugin up to 1.0.3 on WordPress. It has been classified as problematic. Affected is the function t… |
CVE-2015-9373 | Medium | 6.1 | 2019-08-28 | PayPal Pro Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg(). |