Vendor

    Noor Alam

    19 known vulnerabilities in products by Noor Alam, 0 of them actively exploited (CISA KEV).

    Key figures

    19

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Noor Alam
    HighCVE-2026-124267

    WordPress Gmail SMTP plugin <= 1.2.3.23 - Broken Access Control vulnerability

    		7.5
    HighCVE-2026-32538

    WordPress SMTP Mailer plugin <= 1.1.24 - Sensitive Data Exposure vulnerability

    		7.5
    MediumCVE-2025-39572

    WordPress Checkout for PayPal plugin <= 1.0.38 - Cross Site Scripting (XSS) Vulnerability

    		6.5
    MediumCVE-2024-51665

    Noor Alam Magical Addons For Elementor: Server-Side Request Forgery (SSRF)

    also in 1 other product

    		4.9
    MediumCVE-2025-31844

    WordPress Magical Blocks plugin <= 1.0.12 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-32429

    WordPress Magical Addons For Elementor plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2024-51892

    Noor Alam Sell Media File with Stripe: Cross-site Scripting

    		6.5
    MediumCVE-2025-49397

    WordPress Colorbox Lightbox Plugin <= 1.1.5 - Cross Site Scripting (XSS) Vulnerability

    		6.5
    MediumCVE-2026-32387

    WordPress Checkout for PayPal plugin <= 1.0.46 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2025-54706

    WordPress Magical Posts Display Plugin plugin <= 1.2.52 - Cross Site Scripting (XSS) Vulnerability

    		6.5
    MediumCVE-2024-38681

    WordPress Magical Addons For Elementor plugin <= 1.1.41 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2025-69169

    WordPress Easy Media Download plugin <= 1.1.11 - CSS Injection vulnerability

    		5.4
    MediumCVE-2025-26591

    WordPress WP fancybox plugin <= 1.0.3 - Cross Site Scripting (XSS) Vulnerability

    		6.5
    MediumCVE-2024-54212

    WordPress Magical Addons For Elementor plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2024-34547

    WordPress Magical Addons For Elementor plugin <= 1.1.34 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2026-57657

    WordPress Gmail SMTP plugin <= 1.2.3.19 - Cross Site Request Forgery (CSRF) vulnerability

    		4.3
    MediumCVE-2024-37951

    WordPress Magical Posts Display plugin <= 1.2.38 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2024-38730

    Noor alam Magical Addons For Elementor: Server-Side Request Forgery (SSRF)

    also in 1 other product

    		4.9
    HighCVE-2024-49627

    WordPress WordPress Image SEO plugin <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability

    also in 1 other product

    		4.3

    Products

    Products by Noor Alam
    Magical Addons For Elementor60