CVEs we hold for Saad
Records whose assigning authority named Saad as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-8607myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.1 - Authenticated…saadiqbal Points Management System For Gamification, Ranks…
CVE-2026-84762WordPress WP EasyPay plugin <= 4.5.3 - Bypass Vulnerability vulnerabilitySaad Iqbal WP EasyPay
CVE-2026-7430Post Snippets <= 4.0.19 - Authenticated (Administrator+) Stored Cross-Site Scripting via Importsaadiqbal Post Snippets – Custom WordPress Code Snippets…
CVE-2026-73345WordPress License Manager for WooCommerce plugin <= 3.0.18 - SQL Injection vulnerabilitySaad Iqbal License Manager for WooCommerce
CVE-2026-66425WordPress Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin <=…Saad Iqbal Gutena Forms – Contact Form, Survey Form…
CVE-2026-6627WPFormify <= 1.1.1 - Missing Authorizationsaadiqbal WPFormify – Stripe Payments with Form and Checkout
CVE-2026-61968WordPress myCred plugin <= 3.1.2 - Broken Access Control vulnerabilitySaad Iqbal myCred
CVE-2026-61958WordPress License Manager for WooCommerce plugin <= 3.0.17 - Arbitrary Content Deletion vulnerabilitySaad Iqbal License Manager for WooCommerce
CVE-2026-57810WordPress APIExperts Square for WooCommerce plugin <= 4.7.4 - SQL Injection vulnerabilitySaad Iqbal APIExperts Square for WooCommerce
CVE-2026-57808WordPress WP EasyPay plugin <= 4.5.0 - Arbitrary Content Deletion vulnerabilitySaad Iqbal WP EasyPay
CVE-2026-56024WordPress WP EasyPay plugin <= 4.5.0 - Cross Site Request Forgery (CSRF) vulnerabilitySaad Iqbal WP EasyPay
CVE-2026-54848WordPress APIExperts Square for WooCommerce plugin <= 4.7.3 - Sensitive Data Exposure vulnerabilitySaad Iqbal APIExperts Square for WooCommerce
CVE-2026-45215WordPress WP EasyPay plugin <= 4.3.0 - Sensitive Data Exposure vulnerabilitySaad Iqbal WP EasyPay
CVE-2026-45211WordPress APIExperts Square for WooCommerce plugin <= 4.7.1 - SQL Injection vulnerabilitySaad Iqbal APIExperts Square for WooCommerce
CVE-2026-32587WordPress WP EasyPay plugin <= 4.2.11 - Broken Access Control vulnerabilitySaad Iqbal WP EasyPay
CVE-2026-3090Post SMTP <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting via 'event_type'saadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2026-27440WordPress myCred plugin <= 2.9.7.6 - Cross Site Scripting (XSS) vulnerabilitySaad Iqbal myCred
CVE-2026-2559Post SMTP <= 3.8.0 - Missing Authorization to Authenticated (Subscriber+) Office 365 OAuth Configuration Overwritesaadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2026-25390WordPress New User Approve plugin <= 3.2.3 - Broken Access Control vulnerabilitySaad Iqbal New User Approve
CVE-2026-25001WordPress Post Snippets plugin <= 4.0.12 - Remote Code Execution (RCE) vulnerabilitySaad Iqbal Post Snippets
CVE-2026-24951WordPress myCred plugin <= 2.9.7.3 - Broken Access Control vulnerabilitySaad Iqbal myCred
CVE-2026-17149myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated…saadiqbal Points Management System For Gamification, Ranks…
CVE-2026-1674Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.6.0 - Authenticated…saadiqbal Gutena Forms – Contact Form, Survey Form…
CVE-2026-15009Advanced File Manager <= 5.4.12 - Reflected Cross-Site Scripting via postMessage 'soundFile' Parametersaadiqbal Advanced File Manager – Ultimate File Manager for…
CVE-2026-12739WP Easy Pay <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletionsaadiqbal WP Easy Pay – Payment and Donation Form Builder…
CVE-2026-12738WP Easy Pay <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Status Modification via…saadiqbal WP Easy Pay – Payment and Donation form Builder…
CVE-2026-12144Wholesale for WooCommerce <= 2.0.5 - Authenticated (Author+) Privilege Escalation via 'user_role_set' Parametersaadiqbal Wholesale for WooCommerce
CVE-2026-12097User Management <= 1.2 - Missing Authorization to Unauthenticated Plugin Settings Modificationsaadiqbal User Management
CVE-2026-11995Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 - Missing…saadiqbal Gutena Forms – Contact Form, Survey Form…
CVE-2026-0832New User Approve <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary User Approval, Denial, and Information…saadiqbal New User Approve
CVE-2026-0550myCred <= 2.9.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mycred_load_coupon' Shortcodesaadiqbal Points Management System For Gamification, Ranks…
CVE-2025-9219Post SMTP <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Option Updatesaadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2025-69063WordPress New User Approve plugin <= 3.2.0 - Broken Access Control vulnerabilitySaad Iqbal New User Approve
CVE-2025-68881WordPress AppExperts plugin <= 1.4.5 - SQL Injection vulnerabilitySaad Iqbal AppExperts
CVE-2025-68080WordPress User Avatar - Reloaded plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerabilitySaad Iqbal User Avatar - Reloaded
CVE-2025-67563WordPress Post SMTP plugin <= 3.6.1 - Broken Access Control vulnerabilitySaad Iqbal Post SMTP
CVE-2025-67471WordPress Quick Contact Form plugin <= 8.2.5 - Cross Site Request Forgery (CSRF) vulnerabilitySaad Iqbal Quick Contact Form
CVE-2025-63040WordPress Post Snippets plugin <= 4.0.11 - Cross Site Request Forgery (CSRF) vulnerabilitySaad Iqbal Post Snippets
CVE-2025-63030WordPress New User Approve plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerabilitySaad Iqbal New User Approve
CVE-2025-58788WordPress License Manager for WooCommerce Plugin <= 3.0.12 - SQL Injection VulnerabilitySaad Iqbal License Manager for WooCommerce
CVE-2025-58595WordPress All In One Login plugin <= 2.0.8 - Bypass Vulnerability vulnerabilitySaad Iqbal All In One Login
CVE-2025-54668WordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) VulnerabilitySaad Iqbal myCred
CVE-2025-53218WordPress AppExperts plugin <= 1.4.5 - Sensitive Data Exposure vulnerabilitySaad Iqbal AppExperts
CVE-2025-49872WordPress myCred plugin <= 2.9.4.2 - Broken Access Control VulnerabilitySaad Iqbal myCred
CVE-2025-49857WordPress myCred plugin <= 2.9.4.2 - Broken Access Control VulnerabilitySaad Iqbal myCred
CVE-2025-48245WordPress Quick Contact Form plugin <= 8.2.1 - Reflected Cross Site Scripting (XSS) vulnerabilitySaad Iqbal Quick Contact Form
CVE-2025-47688WordPress Advanced File Manager plugin <= 5.3.1 - Broken Access Control to Notice Dismissal vulnerabilitySaad Iqbal Advanced File Manager
CVE-2025-3453Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products <= 2.7.7 - Unauthenticated…saadiqbal Password Protected — Lock Entire Site, Pages…
CVE-2025-32522WordPress License Manager for WooCommerce plugin <= 3.0.9 - Reflected Cross Site Scripting (XSS) vulnerabilitySaad Iqbal License Manager for WooCommerce
CVE-2025-31805WordPress Gutena Kit plugin <= 2.0.7 - Cross Site Scripting (XSS) vulnerabilitySaad Iqbal Gutena Kit – Gutenberg Blocks and Templates
CVE-2025-30609WordPress AppExperts plugin <= 1.4.3 - Sensitive Data Exposure VulnerabilitySaad Iqbal AppExperts
CVE-2025-24000WordPress Post SMTP plugin <= 3.2.0 - Account Takeover VulnerabilitySaad Iqbal Post SMTP
CVE-2025-22800WordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerabilitySaad Iqbal Post SMTP
CVE-2025-22736WordPress User Management plugin <= 1.2 - Privilege Escalation vulnerabilitySaad Iqbal User Management
CVE-2025-12887Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App <= 3.6.1 - Missing Authorization to…saadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2025-12770New User Approve <= 3.0.9 - Unauthenticated Sensitive Information Disclosure via Type Jugglingsaadiqbal New User Approve
CVE-2025-12718Quick Contact Form <= 8.2.6 - Unauthenticated Open Mail Relaysaadiqbal Quick Contact Form
CVE-2025-12362myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7 - Missing Authorization…saadiqbal Points Management System For Gamification, Ranks…
CVE-2025-12361myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7.1 - Missing…saadiqbal Points Management System For Gamification, Ranks…
CVE-2025-11833Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App <= 3.6.0 - Missing Authorization to…saadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2025-11244Password Protected <= 2.7.11 - Unauthenticated Authorization Bypass via IP Address Spoofingsaadiqbal Password Protected — Lock Entire Site, Pages…
CVE-2025-0521Post SMTP <= 3.0.2 - Unauthenticated Stored Cross-Site Scriptingsaadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2024-8725Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Uploadsaadiqbal Advanced File Manager – Ultimate File Manager for…
CVE-2024-8704Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_localesaadiqbal Advanced File Manager – Ultimate File Manager for…
CVE-2024-8658myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback…saadiqbal Points Management System For Gamification, Ranks…
CVE-2024-8126Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Uploadsaadiqbal Advanced File Manager – Ultimate File Manager for…
CVE-2024-5861WP Easy Pay (Free) <= 4.2.3 - Missing Authorization to Unauthenticated Service Disconnectionsaadiqbal WP Easy Pay – Payment and Donation form Builder…
CVE-2024-5598Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listingsaadiqbal Advanced File Manager – Ultimate File Manager for…
CVE-2024-54323WordPress New User Approve plugin <= 2.6.2 - Broken Access Control vulnerabilitySaad Iqbal New User Approve
CVE-2024-52403WordPress User Management plugin <= 1.1 - Arbitrary File Upload vulnerabilitySaad Iqbal User Management
CVE-2024-5207POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.9.3 - Authenticated…saadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2024-49702WordPress myCred Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerabilitySaad Iqbal myCred Elementor
CVE-2024-47338WordPress WPExperts Square For GiveWP plugin <= 1.3 - SQL Injection vulnerabilitySaad Iqbal WPExperts Square For GiveWP
CVE-2024-43354WordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerabilitySaad Iqbal myCred
CVE-2024-43353WordPress myCred plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerabilitySaad Iqbal myCred
CVE-2024-43214WordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerabilitySaad Iqbal myCred
CVE-2024-32711WordPress myCred plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerabilitySaad Iqbal myCred
CVE-2024-1639License Manager for WooCommerce <= 3.0.6 - Improper Authorization to Authenticated(Contributor+) Sensitive Information…saadiqbal License Manager for WooCommerce
CVE-2024-13844Post SMTP <= 3.1.2 - Authenticated (Administrator+) SQL Injection via columns Parametersaadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2024-13805Advanced File Manager <= 5.2.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploadsaadiqbal Advanced File Manager – Ultimate File Manager for…
CVE-2024-13713WPExperts Square For GiveWP <= 1.3.1 - Authenticated (Subscriber+) SQL Injectionsaadiqbal WPExperts Square For GiveWP
CVE-2024-13333Advanced File Manager 5.2.12 - 5.2.13 - Authenticated (Subscriber+) Arbitrary File Uploadsaadiqbal Advanced File Manager — Ultimate WordPress File…
CVE-2024-11391Advanced File Manager <= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Uploadsaadiqbal Advanced File Manager – Ultimate File Manager for…
CVE-2024-11201myCred – Loyalty Points and Rewards plugin <= 2.7.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via…saadiqbal Points Management System For Gamification, Ranks…
CVE-2024-10187myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcodesaadiqbal Points Management System For Gamification, Ranks…
CVE-2024-0656Password Protected <= 2.6.6 - Authenticated (Admin+) Stored Cross-Site Scriptingsaadiqbal Password Protected — Lock Entire Site, Pages…
CVE-2024-0437Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease <= 2.6.6 - Missing…saadiqbal Password Protected — Lock Entire Site, Pages…
CVE-2023-7027POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 -…saadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2023-6875POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Authorization…saadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2023-6629POST SMTP Mailer <= 2.8.6 - Reflected Cross-Site Scripting via msgsaadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2023-3082Post SMTP <= 2.5.7 - Unauthenticated Stored Cross-Site Scripting via Emailsaadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2021-4422POST SMTP Mailer <= 2.0.20 - Cross-Site Request Forgery Bypasssaadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2021-4411WP EasyPay – Square for WordPress <= 3.2.0 - Cross-Site Request Forgery Bypasssaadiqbal WP Easy Pay – Payment and Donation form Builder…
CVE-2019-25150Email Templates <= 1.3 - HTML Injectionsaadiqbal Email Templates Customizer and Designer for…
97 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.