CVEs we hold for Saadiqbal
Records whose assigning authority named Saadiqbal as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-8607myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.1 - Authenticated…saadiqbal Points Management System For Gamification, Ranks…
CVE-2026-7430Post Snippets <= 4.0.19 - Authenticated (Administrator+) Stored Cross-Site Scripting via Importsaadiqbal Post Snippets – Custom WordPress Code Snippets…
CVE-2026-6627WPFormify <= 1.1.1 - Missing Authorizationsaadiqbal WPFormify – Stripe Payments with Form and Checkout
CVE-2026-3090Post SMTP <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting via 'event_type'saadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2026-2559Post SMTP <= 3.8.0 - Missing Authorization to Authenticated (Subscriber+) Office 365 OAuth Configuration Overwritesaadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2026-17149myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated…saadiqbal Points Management System For Gamification, Ranks…
CVE-2026-1674Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.6.0 - Authenticated…saadiqbal Gutena Forms – Contact Form, Survey Form…
CVE-2026-15009Advanced File Manager <= 5.4.12 - Reflected Cross-Site Scripting via postMessage 'soundFile' Parametersaadiqbal Advanced File Manager – Ultimate File Manager for…
CVE-2026-12739WP Easy Pay <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletionsaadiqbal WP Easy Pay – Payment and Donation Form Builder…
CVE-2026-12738WP Easy Pay <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Status Modification via…saadiqbal WP Easy Pay – Payment and Donation form Builder…
CVE-2026-12144Wholesale for WooCommerce <= 2.0.5 - Authenticated (Author+) Privilege Escalation via 'user_role_set' Parametersaadiqbal Wholesale for WooCommerce
CVE-2026-12097User Management <= 1.2 - Missing Authorization to Unauthenticated Plugin Settings Modificationsaadiqbal User Management
CVE-2026-11995Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 - Missing…saadiqbal Gutena Forms – Contact Form, Survey Form…
CVE-2026-0832New User Approve <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary User Approval, Denial, and Information…saadiqbal New User Approve
CVE-2026-0550myCred <= 2.9.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mycred_load_coupon' Shortcodesaadiqbal Points Management System For Gamification, Ranks…
CVE-2025-9219Post SMTP <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Option Updatesaadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2025-3453Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products <= 2.7.7 - Unauthenticated…saadiqbal Password Protected — Lock Entire Site, Pages…
CVE-2025-12887Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App <= 3.6.1 - Missing Authorization to…saadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2025-12770New User Approve <= 3.0.9 - Unauthenticated Sensitive Information Disclosure via Type Jugglingsaadiqbal New User Approve
CVE-2025-12718Quick Contact Form <= 8.2.6 - Unauthenticated Open Mail Relaysaadiqbal Quick Contact Form
CVE-2025-12362myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7 - Missing Authorization…saadiqbal Points Management System For Gamification, Ranks…
CVE-2025-12361myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7.1 - Missing…saadiqbal Points Management System For Gamification, Ranks…
CVE-2025-11833Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App <= 3.6.0 - Missing Authorization to…saadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2025-11244Password Protected <= 2.7.11 - Unauthenticated Authorization Bypass via IP Address Spoofingsaadiqbal Password Protected — Lock Entire Site, Pages…
CVE-2025-0521Post SMTP <= 3.0.2 - Unauthenticated Stored Cross-Site Scriptingsaadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2024-8725Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Uploadsaadiqbal Advanced File Manager – Ultimate File Manager for…
CVE-2024-8704Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_localesaadiqbal Advanced File Manager – Ultimate File Manager for…
CVE-2024-8658myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback…saadiqbal Points Management System For Gamification, Ranks…
CVE-2024-8126Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Uploadsaadiqbal Advanced File Manager – Ultimate File Manager for…
CVE-2024-5861WP Easy Pay (Free) <= 4.2.3 - Missing Authorization to Unauthenticated Service Disconnectionsaadiqbal WP Easy Pay – Payment and Donation form Builder…
CVE-2024-5598Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listingsaadiqbal Advanced File Manager – Ultimate File Manager for…
CVE-2024-5207POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.9.3 - Authenticated…saadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2024-1639License Manager for WooCommerce <= 3.0.6 - Improper Authorization to Authenticated(Contributor+) Sensitive Information…saadiqbal License Manager for WooCommerce
CVE-2024-13844Post SMTP <= 3.1.2 - Authenticated (Administrator+) SQL Injection via columns Parametersaadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2024-13805Advanced File Manager <= 5.2.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploadsaadiqbal Advanced File Manager – Ultimate File Manager for…
CVE-2024-13713WPExperts Square For GiveWP <= 1.3.1 - Authenticated (Subscriber+) SQL Injectionsaadiqbal WPExperts Square For GiveWP
CVE-2024-13333Advanced File Manager 5.2.12 - 5.2.13 - Authenticated (Subscriber+) Arbitrary File Uploadsaadiqbal Advanced File Manager — Ultimate WordPress File…
CVE-2024-11391Advanced File Manager <= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Uploadsaadiqbal Advanced File Manager – Ultimate File Manager for…
CVE-2024-11201myCred – Loyalty Points and Rewards plugin <= 2.7.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via…saadiqbal Points Management System For Gamification, Ranks…
CVE-2024-10187myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcodesaadiqbal Points Management System For Gamification, Ranks…
CVE-2024-0656Password Protected <= 2.6.6 - Authenticated (Admin+) Stored Cross-Site Scriptingsaadiqbal Password Protected — Lock Entire Site, Pages…
CVE-2024-0437Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease <= 2.6.6 - Missing…saadiqbal Password Protected — Lock Entire Site, Pages…
CVE-2023-7027POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 -…saadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2023-6875POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Authorization…saadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2023-6629POST SMTP Mailer <= 2.8.6 - Reflected Cross-Site Scripting via msgsaadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2023-3082Post SMTP <= 2.5.7 - Unauthenticated Stored Cross-Site Scripting via Emailsaadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2021-4422POST SMTP Mailer <= 2.0.20 - Cross-Site Request Forgery Bypasssaadiqbal Post SMTP – Complete Email Deliverability and…
CVE-2021-4411WP EasyPay – Square for WordPress <= 3.2.0 - Cross-Site Request Forgery Bypasssaadiqbal WP Easy Pay – Payment and Donation form Builder…
CVE-2019-25150Email Templates <= 1.3 - HTML Injectionsaadiqbal Email Templates Customizer and Designer for…
49 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.