Webdevstudios - vulnerabilities (CVEs)
9 CVEs in 7 products, 0 in the last 30 days, newest from 2026-01-23.
Products
- Automatic Featured Images From Videos - 2 CVEs
- Custom Post Type Ui - 2 CVEs
- Constant Contact For Wordpress - 1 CVEs
- Ithemes Paypal Pro - 1 CVEs
- Taxonomy-switcher Plugin - 1 CVEs
- Taxonomy Switcher - 1 CVEs
- Wds Multisite Aggregate - 1 CVEs
Newest CVEs of Webdevstudios
- CVE-2026-24535 - CVSS 4.3 (medium), 2026-01-23: Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos allows Exploiting Incorrectly…
- CVE-2025-14056 - CVSS 4.4 (medium), 2025-12-13: The Custom Post Type UI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'label' parameter during custom post type import in all…
- CVE-2025-12826 - CVSS 4.8 (medium), 2025-12-04: The Custom Post Type UI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.18.0. This is due to the plugin not…
- CVE-2025-48101 - CVSS 8.8 (high), 2025-09-09: Deserialization of Untrusted Data vulnerability in webdevstudios Constant Contact for WordPress allows Object Injection. This issue affects Constant Contact…
- CVE-2025-31820 - CVSS 4.3 (medium), 2025-04-01: Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos allows Exploiting Incorrectly…
- CVE-2015-10120 - CVSS 6.1 (medium), 2023-07-10: A vulnerability, which was classified as problematic, was found in WDS Multisite Aggregate Plugin up to 1.0.0 on WordPress. Affected is the function…
- CVE-2023-1623 - CVSS 6.5 (medium), 2023-04-24: The Custom Post Type UI WordPress plugin before 1.13.5 does not properly check for CSRF when sending the debug information to a user supplied email, which…
- CVE-2015-10013 - CVSS 6.1 (medium), 2023-01-05: A vulnerability was found in WebDevStudios taxonomy-switcher Plugin up to 1.0.3 on WordPress. It has been classified as problematic. Affected is the function…
- CVE-2015-9373 - CVSS 6.1 (medium), 2019-08-28: PayPal Pro Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
