Vendor

    Syed Balkhi

    45 known vulnerabilities in products by Syed Balkhi, 0 of them actively exploited (CISA KEV).

    Key figures

    45

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Syed Balkhi
    HighCVE-2026-94123

    WordPress NextGEN Gallery plugin <= 4.5.0 - Arbitrary File Download vulnerability

    		7.5
    HighCVE-2026-81287

    WordPress Charitable plugin <= 1.8.12.1 - SQL Injection vulnerability

    		8.5
    HighCVE-2026-95522

    WordPress Easy Digital Downloads plugin <= 3.7.0 - SQL Injection vulnerability

    		7.6
    HighCVE-2026-28141

    WordPress NextGEN Gallery plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2025-32158

    WordPress aThemes Addons for Elementor plugin <= 1.1.3 - Local File Inclusion vulnerability

    also in 1 other product

    		7.5
    HighCVE-2026-73994

    WordPress Charitable plugin <= 1.8.11.3 - Broken Access Control vulnerability

    		7.5
    HighCVE-2026-104394

    WordPress Charitable plugin <= 1.8.12.3 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2026-54837

    Missing Authorization (CVE-2026-54837)

    		7.5
    HighCVE-2025-68496

    WordPress User Feedback plugin <= 1.10.0 - SQL Injection vulnerability

    		7.6
    MediumCVE-2026-66476

    WordPress Easy Digital Downloads plugin <= 3.6.9 - Arbitrary File Deletion vulnerability

    		4.9
    HighCVE-2025-67950

    WordPress All In One SEO Pack plugin <= 4.9.1 - SQL Injection vulnerability

    		8.5
    MediumCVE-2026-104079

    Envira Gallery Lite < 1.16.2 Missing Authorization via Gallery Conversion REST Endpoint

    		4.3
    HighCVE-2026-52698

    Insertion of Sensitive Information Into Sent Data (CVE-2026-52698)

    		7.4
    HighCVE-2026-39475

    WordPress User Feedback plugin <= 1.10.1 - SQL Injection vulnerability

    		7.6
    HighCVE-2026-40764

    Syed Balkhi Contact Form by WPForms: Cross-Site Request Forgery (CSRF)

    		8.1
    CriticalCVE-2023-40005

    WordPress Easy Digital Downloads plugin <= 3.1.5 - Broken Access Control

    also in 1 other product

    		5.3
    MediumCVE-2020-36919

    WPForms 1.7.8 - Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1
    MediumCVE-2025-64295

    WordPress All In One SEO Pack plugin <= 4.8.6.1 - Sensitive Data Exposure vulnerability

    		6.5
    MediumCVE-2026-25339

    WordPress Contact Form by WPForms plugin <= 1.9.8.7 - Sensitive Data Exposure vulnerability

    		6.5
    MediumCVE-2025-31734

    WordPress Simple Post Expiration plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2023-45747

    WordPress WP Lightbox 2 Plugin <= 3.0.6.5 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		5.9
    MediumCVE-2023-50887

    WordPress User Feedback plugin <= 1.0.10 - Broken Access Control vulnerability

    		5.3
    HighCVE-2025-24637

    Syed Balkhi Beacon Lead Magnets and Lead Capture: Cross-site Scripting

    		7.1
    MediumCVE-2025-30770

    WordPress Charitable plugin <= 1.8.4.7 - Cross Site Scripting (XSS) Vulnerability

    		6.5
    MediumCVE-2025-60112

    WordPress aThemes Addons for Elementor Plugin <= 1.1.2 - Cross Site Scripting (XSS) Vulnerability

    		6.5

    All vulnerabilities in search

    Products

    Products by Syed Balkhi
    Charitable50
    All In One Seo Pack40
    Athemes Addons For Elementor40
    Contact Form By Wpforms40
    User Feedback40
    Easy Digital Downloads30