Vendor

    weDevs

    141 known vulnerabilities in products by weDevs, 0 of them actively exploited (CISA KEV).

    Key figures

    141

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    7

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in weDevs
    CriticalCVE-2024-3922

    Dokan Pro <= 3.10.3 - Unauthenticated SQL Injection

    also in 1 other product

    10.0
    HighCVE-2021-25076

    WP User Frontend < 3.5.26 - SQL Injection to Reflected Cross-Site Scripting

    8.8
    CriticalCVE-2026-18080

    Unrestricted Upload of File with Dangerous Type (CVE-2026-18080)

    9.8
    HighCVE-2023-2744

    WP ERP < 1.12.4 - Admin+ SQL Injection

    7.2
    CriticalCVE-2026-116512

    Unrestricted Upload of File with Dangerous Type (CVE-2026-116512)

    9.8
    HighCVE-2026-5127

    Deserialization of Untrusted Data (CVE-2026-5127)

    8.8
    CriticalCVE-2026-78262

    WordPress WP Project Manager plugin <= 4.0.6 - PHP Object Injection vulnerability

    9.8
    HighCVE-2025-3054

    WP User Frontend Pro <= 4.1.3 - Authenticated (Subscriber+) Arbitrary File Upload

    8.8
    HighCVE-2026-81283

    WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerability

    8.8
    HighCVE-2026-1565

    Unrestricted Upload of File with Dangerous Type (CVE-2026-1565)

    8.8
    HighCVE-2026-120070

    Improper Privilege Management (CVE-2026-120070)

    8.8
    HighCVE-2025-3055

    WP User Frontend Pro <= 4.1.3 - Authenticated (Subscriber+) Arbitrary File Deletion

    8.1
    HighCVE-2026-12224

    weDevs Dokan Pro: Improper Privilege Management

    8.8
    HighCVE-2023-3636

    weDevs WP Project Manager: Improper Privilege Management

    8.8
    HighCVE-2026-96894

    Cross-site Scripting (CVE-2026-96894)

    7.2
    CriticalCVE-2021-24649

    WP User Frontend < 3.5.29 - Obscure Registration as Admin

    9.8
    MediumCVE-2026-95525

    WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability

    6.5
    HighCVE-2026-96343

    WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability

    7.2
    MediumCVE-2026-11421

    SQL Injection (CVE-2026-11421)

    6.5
    HighCVE-2026-96346

    WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability

    7.6
    HighCVE-2026-115590

    WordPress Dokan plugin <= 5.3.1 - PHP Object Injection vulnerability

    7.2
    HighCVE-2026-13440

    Cross-site Scripting (CVE-2026-13440)

    7.2
    HighCVE-2026-12077

    Dokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' Parameters

    7.5
    HighCVE-2024-0952

    WP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection via id

    7.2
    CriticalCVE-2023-34383

    WordPress WP Project Manager Plugin <= 2.6.0 is vulnerable to SQL Injection

    8.5

    All vulnerabilities in search

    Products