Wpdever - vulnerabilities (CVEs)
6 CVEs in 3 products, 0 in the last 30 days, newest from 2026-05-01.
Products
- Wp Notification Bell - 3 CVEs
- Cart Tracking For Woocommerce - 2 CVEs
- Target Notifications - 1 CVEs
Newest CVEs of Wpdever
- CVE-2024-13362 - CVSS 6.1 (medium), 2026-05-01: Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient…
- CVE-2025-58821 - CVSS 5.9 (medium), 2025-09-05: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdever WP Notification Bell wp-notification-bell allows…
- CVE-2025-47538 - CVSS 7.6 (high), 2025-05-07: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdever Cart tracking for WooCommerce…
- CVE-2025-30791 - CVSS 7.6 (high), 2025-03-27: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdever Cart tracking for WooCommerce…
- CVE-2025-22357 - CVSS 7.1 (high), 2025-01-07: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdever Target Notifications target-notifications allows…
- CVE-2022-4974 - CVSS 6.3 (medium), 2024-10-16: The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to…
