Vendor

    Smub

    114 known vulnerabilities in products by Smub, 0 of them actively exploited (CISA KEV).

    Key figures

    114

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Smub
    CriticalCVE-2019-25141

    Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update

    also in 1 other product

    		9.8
    HighCVE-2026-8832

    Code Injection (CVE-2026-8832)

    		8.8
    MediumCVE-2024-3097

    Imagely NextGEN Gallery: Missing Authorization

    also in 1 other product

    		5.3
    HighCVE-2026-76010

    Unrestricted Upload of File with Dangerous Type (CVE-2026-76010)

    		8.8
    HighCVE-2026-82814

    Duplicator <= 1.5.17 and Duplicator Pro <= 4.6.10 - Unauthenticated PHP Object Injection

    		8.8
    HighCVE-2026-76012

    Unrestricted Upload of File with Dangerous Type (CVE-2026-76012)

    		7.5
    HighCVE-2026-12476

    Unrestricted Upload of File with Dangerous Type (CVE-2026-12476)

    		7.2
    MediumCVE-2023-0586

    All in One SEO Pack <= 4.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

    also in 1 other product

    		6.4
    CriticalCVE-2023-4404

    Donation Forms by Charitable <= 1.7.0.12 - Unauthenticated Privilege Escalation

    also in 1 other product

    		9.8
    HighCVE-2025-13641

    PHP Remote File Inclusion (CVE-2025-13641)

    		8.8
    HighCVE-2026-1992

    Authorization Bypass Through User-Controlled Key (CVE-2026-1992)

    		8.8
    CriticalCVE-2024-8791

    WPCharitable Charitable: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    		9.8
    HighCVE-2026-5464

    Missing Authorization (CVE-2026-5464)

    		7.2
    HighCVE-2024-11205

    Wpforms: Missing Authorization

    also in 1 other product

    		8.5
    HighCVE-2026-1463

    PHP Remote File Inclusion (CVE-2026-1463)

    		8.8
    HighCVE-2026-120538

    Improper Authentication (CVE-2026-120538)

    		8.1
    MediumCVE-2026-77189

    Charitable <= 1.8.12.1 - Authenticated (Contributor+) SQL Injection via 'order' Shortcode Attribute

    		6.5
    MediumCVE-2026-100152

    Code Injection (CVE-2026-100152)

    		6.5
    MediumCVE-2026-84909

    Smub Custom Twitter Feeds: Cross-site Scripting

    		6.4
    HighCVE-2026-93756

    Cross-site Scripting (CVE-2026-93756)

    		7.2
    HighCVE-2026-1993

    Improper Privilege Management (CVE-2026-1993)

    		8.8
    HighCVE-2026-97640

    Cross-site Scripting (CVE-2026-97640)

    		7.2
    HighCVE-2026-6177

    Custom Twitter Feeds <= 2.5.4 - Unauthenticated Stored Cross-Site Scripting via Cached Tweet Text

    		7.2
    MediumCVE-2026-88996

    WPForms <= 2.0.2 - Reflected Cross-Site Scripting via 'page_title' POST Parameter

    		6.1
    HighCVE-2026-14335

    Cross-site Scripting (CVE-2026-14335)

    		7.2

    All vulnerabilities in search

    Products

    Products by Smub
    Easy Digital Downloads – Ecommerce Payments And Subscriptions Made Easy160
    Photo Gallery, Sliders, Proofing And Themes – Nextgen Gallery100
    Charitable – Donation Plugin For Wordpress – Fundraising With Recurring Donations & More80
    All In One Seo – Powerful Seo Plugin To Boost Seo Rankings & Increase Traffic70
    Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More70
    Wpforms – Easy Form Builder For Wordpress – Contact Forms, Payment Forms, Surveys, & More60
    Sydney Toolbox50
    Athemes Addons For Elementor40
    Custom Twitter Feeds – A Tweets Widget Or X Feed Widget40
    Exactmetrics – Google Analytics Dashboard For Wordpress (website Stats Plugin)40
    Wpforms – AI Form Builder For Wordpress – Contact Forms, Payment Forms, Survey Form, Quiz & More40
    All In One Seo – AI Seo Plugin To Boost Seo Rankings & Traffic (schema, Local Seo, Sitemap & Seo Insights)30
    Giveaways And Contests By Rafflepress – Get More Website Traffic, Email Subscribers, And Social Followers30
    Smash Balloon Social Photo Feed – Easy Social Feeds Plugin30
    Smash Balloon Social Post Feed – Simple Social Feeds For Wordpress30
    Userfeedback – Create Interactive Feedback Form, User Surveys, And Polls In Seconds30
    Wp Mail Logging30