Webfactoryltd - vulnerabilities (CVEs)

27 CVEs in 14 products, 0 in the last 30 days, newest from 2025-02-25.

Products

Minimal Coming Soon & Maintenance Mode - 5 CVEs
Wp Database Reset - 3 CVEs
Wp Reset - 3 CVEs
301 Redirects - 2 CVEs
External Links In New Window / New Tab - 2 CVEs
Under Construction - 2 CVEs
Wp Login Lockdown - 2 CVEs
Wp Reset Pro - 2 CVEs
Advanced Google Recaptcha - 1 CVEs
Guest Author - 1 CVEs
Maintenance - 1 CVEs
Maps Widget For Google Maps - 1 CVEs
Simple Author Box - 1 CVEs
Wp Force Ssl - 1 CVEs

Newest CVEs of Webfactoryltd

CVE-2025-1262 - CVSS 5.3 (medium), 2025-02-25: The Advanced Google reCaptcha plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 1.27 . This makes it possible for…
CVE-2024-5087 - CVSS 6.3 (medium), 2024-06-08: The Minimal Coming Soon – Coming Soon Page plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…
CVE-2024-4661 - CVSS 4.3 (medium), 2024-06-08: The WP Reset plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_ajax function in all…
CVE-2024-5770 - CVSS 4.3 (medium), 2024-06-08: The WP Force SSL & HTTPS SSL Redirect plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…
CVE-2023-6799 - CVSS 5.9 (medium), 2024-04-09: The WP Reset – Most Advanced WordPress Reset Tool plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,…
CVE-2024-1340 - CVSS 5.4 (medium), 2024-02-29: The Login Lockdown – Protect Login Form plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the…
CVE-2024-1501 - CVSS 4.7 (medium), 2024-02-21: The Database Reset plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.22. This is due to missing or…
CVE-2024-1075 - CVSS 5.3 (medium), 2024-02-05: The Minimal Coming Soon – Coming Soon Page plugin for WordPress is vulnerable to maintenance mode bypass and information disclosure in all versions up to, and…
CVE-2023-50837 - CVSS 7.6 (high), 2023-12-29: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WebFactory Ltd Login Lockdown – Protect Login Form.This…
CVE-2023-49747 - CVSS 5.9 (medium), 2023-12-15: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebFactory Ltd Guest Author allows Stored XSS.This issue…
CVE-2023-3601 - CVSS 4.3 (medium), 2023-08-14: The Simple Author Box WordPress plugin before 2.52 does not verify a user ID before outputting information about that user, leading to arbitrary user…
CVE-2023-0831 - CVSS 4.3 (medium), 2023-06-09: The Under Construction plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.96. This is due to missing or…
CVE-2023-0832 - CVSS 4.3 (medium), 2023-06-09: The Under Construction plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.96. This is due to missing or…
CVE-2023-1913 - CVSS 4.8 (medium), 2023-04-06: The Maps Widget for Google Maps for WordPress is vulnerable to Stored Cross-Site Scripting via widget settings in versions up to, and including, 4.24 due to…
CVE-2022-1583 - CVSS 6.5 (medium), 2022-05-30: The External Links in New Window / New Tab WordPress plugin before 1.43 does not ensure window.opener is set to "null" when links to external sites are…
CVE-2022-1582 - CVSS 6.1 (medium), 2022-05-30: The External Links in New Window / New Tab WordPress plugin before 1.43 does not properly escape URLs it concatenates to onclick event handlers, which makes…
CVE-2021-36909 - CVSS 8.8 (high), 2021-11-18: Authenticated Database Reset vulnerability in WordPress WP Reset PRO Premium plugin (versions <= 5.98) allows any authenticated user to wipe the entire…
CVE-2021-36908 - CVSS 8.8 (high), 2021-11-18: Cross-Site Request Forgery (CSRF) vulnerability in WebFactory Ltd. WP Reset PRO plugin <= 5.98 versions.
CVE-2021-24533 - CVSS 4.8 (medium), 2021-08-23: The Maintenance WordPress plugin before 4.03 does not sanitise or escape some of its settings, allowing high privilege users such as admin to se Cross-Site…
CVE-2021-24424 - CVSS 5.4 (medium), 2021-07-12: The WP Reset – Most Advanced WordPress Reset Tool WordPress plugin before 1.90 did not sanitise or escape its extra_data parameter when creating a snapshot…
CVE-2021-24142 - CVSS 7.2 (high), 2021-03-18: Unvaludated input in the 301 Redirects - Easy Redirect Manager WordPress plugin, versions before 2.51, did not sanitise its "Redirect From" column when…
CVE-2020-7048 - CVSS 9.1 (critical), 2020-01-16: The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any table in the database to the initial…
CVE-2020-7047 - CVSS 9.9 (critical), 2020-01-16: The WordPress plugin, WP Database Reset through 3.1, contains a flaw that gave any authenticated user, with minimal permissions, the ability (with a simple…
CVE-2020-6168 - CVSS 7.6 (high), 2020-01-09: A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows authenticated users with basic access to enable and disable…
CVE-2020-6166 - CVSS 5.4 (medium), 2020-01-09: A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.15, allows authenticated users with basic access to export settings and…
CVE-2020-6167 - CVSS 9.6 (critical), 2020-01-09: A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a CSRF attack to enable maintenance mode, inject XSS, modify…
CVE-2019-19915 - CVSS 9 (critical), 2019-12-19: The "301 Redirects - Easy Redirect Manager" plugin before 2.45 for WordPress allows users (with subscriber or greater access) to modify, delete, or inject…