Webfactoryltd
27 CVEs across 14 Webfactoryltd products. Browse Webfactoryltd vulnerabilities, severities, and proof-of-concept exploits.
Webfactoryltd products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-1262 | Medium | 5.3 | 2025-02-25 | The Advanced Google reCaptcha plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 1.27 . This makes it possible for unauthen… |
CVE-2024-5087 | Medium | 6.3 | 2024-06-08 | The Minimal Coming Soon – Coming Soon Page plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the val… |
CVE-2024-4661 | Medium | 4.3 | 2024-06-08 | The WP Reset plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_ajax function in all version… |
CVE-2024-5770 | Medium | 4.2 | 2024-06-08 | The WP Force SSL & HTTPS SSL Redirect plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_sa… |
CVE-2023-6799 | Medium | 5.9 | 2024-04-09 | The WP Reset – Most Advanced WordPress Reset Tool plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2… |
CVE-2024-1340 | Medium | 5.4 | 2024-02-29 | The Login Lockdown – Protect Login Form plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the generate_exp… |
CVE-2024-1501 | Medium | 4.7 | 2024-02-21 | The Database Reset plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.22. This is due to missing or incor… |
CVE-2024-1075 | Low | 3.7 | 2024-02-05 | The Minimal Coming Soon – Coming Soon Page plugin for WordPress is vulnerable to maintenance mode bypass and information disclosure in all versions up to, and… |
CVE-2023-50837 | High | 7.6 | 2023-12-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WebFactory Ltd Login Lockdown – Protect Login Form.This i… |
CVE-2023-49747 | Medium | 5.9 | 2023-12-15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebFactory Ltd Guest Author allows Stored XSS.This issue… |
CVE-2023-3601 | Medium | 4.3 | 2023-08-14 | The Simple Author Box WordPress plugin before 2.52 does not verify a user ID before outputting information about that user, leading to arbitrary user informati… |
CVE-2023-0832 | Medium | 4.3 | 2023-06-09 | The Under Construction plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.96. This is due to missing or incor… |
CVE-2023-0831 | Medium | 4.3 | 2023-06-09 | The Under Construction plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.96. This is due to missing or incor… |
CVE-2023-1913 | Medium | 4.4 | 2023-04-06 | The Maps Widget for Google Maps for WordPress is vulnerable to Stored Cross-Site Scripting via widget settings in versions up to, and including, 4.24 due to in… |
CVE-2022-1583 | Medium | 6.5 | 2022-05-30 | The External Links in New Window / New Tab WordPress plugin before 1.43 does not ensure window.opener is set to "null" when links to external sites are clicked… |
CVE-2022-1582 | Medium | 6.1 | 2022-05-30 | The External Links in New Window / New Tab WordPress plugin before 1.43 does not properly escape URLs it concatenates to onclick event handlers, which makes St… |
CVE-2021-36909 | High | 8.8 | 2021-11-18 | Authenticated Database Reset vulnerability in WordPress WP Reset PRO Premium plugin (versions <= 5.98) allows any authenticated user to wipe the entire databas… |
CVE-2021-36908 | High | 8.8 | 2021-11-18 | Cross-Site Request Forgery (CSRF) vulnerability in WebFactory Ltd. WP Reset PRO plugin <= 5.98 versions. |
CVE-2021-24533 | Medium | 4.8 | 2021-08-23 | The Maintenance WordPress plugin before 4.03 does not sanitise or escape some of its settings, allowing high privilege users such as admin to se Cross-Site Scr… |
CVE-2021-24424 | Medium | 5.4 | 2021-07-12 | The WP Reset – Most Advanced WordPress Reset Tool WordPress plugin before 1.90 did not sanitise or escape its extra_data parameter when creating a snapshot via… |
CVE-2021-24142 | High | 7.2 | 2021-03-18 | Unvaludated input in the 301 Redirects - Easy Redirect Manager WordPress plugin, versions before 2.51, did not sanitise its "Redirect From" column when importi… |
CVE-2020-7048 | Critical | 9.1 | 2020-01-16 | The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any table in the database to the initial Wo… |
CVE-2020-7047 | High | 8.8 | 2020-01-16 | The WordPress plugin, WP Database Reset through 3.1, contains a flaw that gave any authenticated user, with minimal permissions, the ability (with a simple wp-… |
CVE-2020-6168 | High | 7.6 | 2020-01-09 | A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows authenticated users with basic access to enable and disable mainten… |
CVE-2020-6166 | Medium | 5.4 | 2020-01-09 | A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.15, allows authenticated users with basic access to export settings and change… |
CVE-2020-6167 | High | 8.8 | 2020-01-09 | A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a CSRF attack to enable maintenance mode, inject XSS, modify severa… |
CVE-2019-19915 | Critical | 9.0 | 2019-12-19 | The "301 Redirects - Easy Redirect Manager" plugin before 2.45 for WordPress allows users (with subscriber or greater access) to modify, delete, or inject redi… |