Vulnerabilities in Saad Iqbal
47 resultsVexday analysis
Saad Iqbal apresenta 44 vulnerabilidades catalogadas, com 2 classificadas como críticas, mas nenhuma está sob ataque ativo conhecido. A fraqueza dominante é autorização inadequada (CWE-862), indicando falhas em controle de acesso. Com 7 vulnerabilidades publicadas nos últimos 90 dias, o risco está em evolução moderada, exigindo monitoramento contínuo mas sem indicadores imediatos de exploração em campo.
CVE-2026-61958MEDIUMWordPress License Manager for WooCommerce plugin <= 3.0.17 - Arbitrary Content Deletion vulnerabilityEPSS 0.3%CVE-2026-61968MEDIUMWordPress myCred plugin <= 3.1.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-66425MEDIUMWordPress Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin <= 1.9.0 - Broken Authentication vulnerabilityEPSS 0.3%CVE-2025-53218MEDIUMWordPress AppExperts plugin <= 1.4.5 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2025-32522HIGHWordPress License Manager for WooCommerce plugin <= 3.0.9 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-73345HIGHWordPress License Manager for WooCommerce plugin <= 3.0.18 - SQL Injection vulnerabilityEPSS 0.3%CVE-2024-43214MEDIUMWordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2025-68881HIGHWordPress AppExperts plugin <= 1.4.5 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-69063HIGHWordPress New User Approve plugin <= 3.2.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-49702MEDIUMWordPress myCred Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-43353MEDIUMWordPress myCred plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-25001HIGHWordPress Post Snippets plugin <= 4.0.12 - Remote Code Execution (RCE) vulnerabilityEPSS 0.2%CVE-2026-45211HIGHWordPress APIExperts Square for WooCommerce plugin <= 4.7.1 - SQL Injection vulnerabilityEPSS 0.2%CVE-2025-48245HIGHWordPress Quick Contact Form plugin <= 8.2.1 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-54668MEDIUMWordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-54667MEDIUMWordPress myCred plugin <= 2.9.4.3 - Race Condition VulnerabilityEPSS 0.2%CVE-2025-49872MEDIUMWordPress myCred plugin <= 2.9.4.2 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2026-45215MEDIUMWordPress WP EasyPay plugin <= 4.3.0 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2025-49857MEDIUMWordPress myCred plugin <= 2.9.4.2 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2026-24951MEDIUMWordPress myCred plugin <= 2.9.7.3 - Broken Access Control vulnerabilityEPSS 0.2%