Fullworksplugins - vulnerabilities (CVEs)

17 CVEs in 5 products, 0 in the last 30 days, newest from 2025-07-17.

Products

Newest CVEs of Fullworksplugins

CVE-2025-4302 - CVSS 5.3 (medium), 2025-07-17: The Stop User Enumeration WordPress plugin before version 1.7.3 blocks REST API /wp-json/wp/v2/users/ requests for non-authorized users. However, this can be…
CVE-2023-25714 - CVSS 7.5 (high), 2024-12-09: Missing Authorization vulnerability in Fullworks Quick Paypal Payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2023-25035 - CVSS 6.5 (medium), 2024-12-09: Missing Authorization vulnerability in Fullworks Quick Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2023-23975 - CVSS 5.3 (medium), 2024-12-09: Missing Authorization vulnerability in Fullworks Quick Event Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2023-1554 - CVSS 4.8 (medium), 2023-05-02: The Quick Paypal Payments WordPress plugin before 5.7.26.4 does not sanitise and escape some of its settings, which could allow high privilege users such as…
CVE-2023-23889 - CVSS 6.5 (medium), 2023-04-25: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions.
CVE-2022-47608 - CVSS 5.9 (medium), 2023-04-25: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Contact Form plugin <= 8.0.3.1 versions.
CVE-2023-25713 - CVSS 7.1 (high), 2023-04-07: Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions.
CVE-2023-25702 - CVSS 5.9 (medium), 2023-04-07: Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions.
CVE-2023-23885 - CVSS 6.5 (medium), 2023-04-07: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Contact Form plugin <= 8.0.3.1 versions.
CVE-2023-23979 - CVSS 7.1 (high), 2023-04-06: Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 versions.
CVE-2022-46863 - CVSS 5.9 (medium), 2023-03-28: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Event Manager plugin <= 9.6.4 versions.
CVE-2023-23974 - CVSS 5.4 (medium), 2023-03-01: Cross-Site Request Forgery (CSRF) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 affecting all registration actions (delete, delete all, edit,…
CVE-2023-23491 - CVSS 6.1 (medium), 2023-01-20: The Quick Event Manager WordPress Plugin, version < 9.7.5, is affected by a reflected cross-site scripting vulnerability in the 'category' parameter of its…
CVE-2022-37339 - CVSS 5.4 (medium), 2022-09-23: Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Meet My Team plugin <= 2.0.5 at WordPress.
CVE-2017-18536 - CVSS 6.1 (medium), 2019-08-21: The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS.
CVE-2017-1000226 - CVSS 5.3 (medium), 2017-11-17: Stop User Enumeration 1.3.8 allows user enumeration via the REST API