Wp-Experts

6 CVEs across 5 Wp-Experts products. Browse Wp-Experts vulnerabilities, severities, and proof-of-concept exploits.

Wp-Experts products with known CVEs

ProductCVEs
Protect Wp Admin2
Custom Share Buttons With Floating Sidebar1
File Manager Advanced Shortcode1
Wp-Categories-Widget1
Wp Social Buttons1
Wp-Experts CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-13914High7.22025-05-15The File Manager Advanced Shortcode plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.4 (file-manager-advanc…
CVE-2023-31220High7.12023-09-04Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP-EXPERTS.IN TEAM WP Categories Widget plugin <= 2.2 versions.
CVE-2023-3139Medium6.12023-07-04The Protect WP Admin WordPress plugin before 4.0 discloses the URL of the admin panel via a redirection of a crafted URL, bypassing the protection offered.
CVE-2022-1717Medium4.82022-06-20The Custom Share Buttons with Floating Sidebar WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could allow high privilege…
CVE-2022-0874Medium4.82022-05-09The WP Social Buttons WordPress plugin through 2.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site…
CVE-2021-24906High7.52022-01-24The Protect WP Admin WordPress plugin before 3.6.2 does not check for authorisation in the lib/pwa-deactivate.php file, which could allow unauthenticated users…