Wpkube
21 CVEs across 15 Wpkube products. Browse Wpkube vulnerabilities, severities, and proof-of-concept exploits.
Wpkube products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-32469 | Medium | 5.3 | 2026-08-06 | Unauthenticated Bypass Vulnerability in CAPTCHA 4WP <= 7.6.0 versions. |
CVE-2026-4409 | Medium | 6.5 | 2026-05-05 | The Subscribe To Comments Reloaded plugin for WordPress is vulnerable to unauthorized modification of data due to a leaked secret key and usage of a weak hash… |
CVE-2025-69011 | Medium | 6.5 | 2026-02-20 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKube Cool Tag Cloud cool-tag-cloud allows Stored XSS.Th… |
CVE-2025-13614 | High | 8.1 | 2025-12-05 | The Cool Tag Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cool_tag_cloud' shortcode in all versions up to, and inc… |
CVE-2025-12010 | Medium | 6.5 | 2025-11-11 | The Authors List plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.6.1 via the via arbitrary metho… |
CVE-2025-58792 | Medium | 4.3 | 2025-09-05 | Cross-Site Request Forgery (CSRF) vulnerability in WPKube Authors List authors-list allows Cross Site Request Forgery.This issue affects Authors List: from n/a… |
CVE-2025-58790 | Medium | 6.5 | 2025-09-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKube Kiwi kiwi-social-share allows Stored XSS.This issu… |
CVE-2024-12716 | Medium | 4.8 | 2025-05-15 | The Simple Basic Contact Form WordPress plugin before 20250114 does not sanitise and escape some of its settings, which could allow high privilege users such a… |
CVE-2024-13806 | Medium | 6.5 | 2025-03-01 | The The Authors List plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.0.6. This is due to the softwa… |
CVE-2024-10952 | High | 7.3 | 2024-12-04 | The The Authors List plugin for WordPress is vulnerable to arbitrary shortcode execution via update_authors_list_ajax AJAX action in all versions up to, and in… |
CVE-2022-4974 | Medium | 6.3 | 2024-10-16 | The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to… |
CVE-2024-3228 | Medium | 5.3 | 2024-07-09 | The Social Sharing Plugin – Kiwi plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.1.7 via the 'kiwi-nw-pinter… |
CVE-2024-4144 | Medium | 6.5 | 2024-05-14 | The Simple Basic Contact Form plugin for WordPress for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 20240502… |
CVE-2024-4150 | Medium | 6.1 | 2024-05-14 | The Simple Basic Contact Form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘scf_email’ parameter in versions up to, and includi… |
CVE-2024-31249 | Medium | 5.3 | 2024-04-10 | Insertion of Sensitive Information into Log File vulnerability in WPKube Subscribe To Comments Reloaded.This issue affects Subscribe To Comments Reloaded: from… |
CVE-2023-37981 | High | 7.1 | 2023-07-27 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPKube Authors List plugin <= 2.0.2 versions. |
CVE-2021-4362 | Critical | 9.8 | 2023-06-07 | The Kiwi Social Share plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the kiwi_social_share_get_option() functi… |
CVE-2022-4226 | Medium | 4.8 | 2022-12-26 | The Simple Basic Contact Form WordPress plugin before 20221201 does not sanitise and escape some of its settings, which could allow high privilege users such a… |
CVE-2022-29414 | Medium | 5.4 | 2022-04-29 | Multiple (13x) Cross-Site Request Forgery (CSRF) vulnerabilities in WPKube's Subscribe To Comments Reloaded plugin <= 211130 on WordPress allows attackers to c… |
CVE-2021-24745 | Medium | 5.4 | 2021-11-29 | The About Author Box WordPress plugin before 1.0.2 does not sanitise and escape the Social Profiles field values before outputting them in attributes, which co… |
CVE-2021-24682 | Medium | 5.4 | 2021-11-01 | The Cool Tag Cloud WordPress plugin before 2.26 does not escape the style attribute of the cool_tag_cloud shortcode, which could allow users with a role as low… |