Vendor
weDevs
141 known vulnerabilities in products by weDevs, 0 of them actively exploited (CISA KEV).
Key figures
141
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-3922 | Dokan Pro <= 3.10.3 - Unauthenticated SQL Injection | 10.0 | |
| High | CVE-2021-25076 | WP User Frontend < 3.5.26 - SQL Injection to Reflected Cross-Site Scripting | 8.8 | |
| Critical | CVE-2026-18080 | Unrestricted Upload of File with Dangerous Type (CVE-2026-18080) | 9.8 | |
| High | CVE-2023-2744 | WP ERP < 1.12.4 - Admin+ SQL Injection | 7.2 | |
| Critical | CVE-2026-116512 | Unrestricted Upload of File with Dangerous Type (CVE-2026-116512) | 9.8 | |
| High | CVE-2026-5127 | Deserialization of Untrusted Data (CVE-2026-5127) | 8.8 | |
| Critical | CVE-2026-78262 | WordPress WP Project Manager plugin <= 4.0.6 - PHP Object Injection vulnerability | 9.8 | |
| High | CVE-2025-3054 | WP User Frontend Pro <= 4.1.3 - Authenticated (Subscriber+) Arbitrary File Upload | 8.8 | |
| High | CVE-2026-81283 | WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerability | 8.8 | |
| High | CVE-2026-1565 | Unrestricted Upload of File with Dangerous Type (CVE-2026-1565) | 8.8 | |
| High | CVE-2026-120070 | Improper Privilege Management (CVE-2026-120070) | 8.8 | |
| High | CVE-2025-3055 | WP User Frontend Pro <= 4.1.3 - Authenticated (Subscriber+) Arbitrary File Deletion | 8.1 | |
| High | CVE-2026-12224 | weDevs Dokan Pro: Improper Privilege Management | 8.8 | |
| High | CVE-2023-3636 | weDevs WP Project Manager: Improper Privilege Management | 8.8 | |
| High | CVE-2026-96894 | Cross-site Scripting (CVE-2026-96894) | 7.2 | |
| Critical | CVE-2021-24649 | WP User Frontend < 3.5.29 - Obscure Registration as Admin | 9.8 | |
| Medium | CVE-2026-95525 | WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability | 6.5 | |
| High | CVE-2026-96343 | WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability | 7.2 | |
| Medium | CVE-2026-11421 | SQL Injection (CVE-2026-11421) | 6.5 | |
| High | CVE-2026-96346 | WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability | 7.6 | |
| High | CVE-2026-115590 | WordPress Dokan plugin <= 5.3.1 - PHP Object Injection vulnerability | 7.2 | |
| High | CVE-2026-13440 | Cross-site Scripting (CVE-2026-13440) | 7.2 | |
| High | CVE-2026-12077 | Dokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' Parameters | 7.5 | |
| High | CVE-2024-0952 | WP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection via id | 7.2 | |
| Critical | CVE-2023-34383 | WordPress WP Project Manager Plugin <= 2.6.0 is vulnerable to SQL Injection | 8.5 |