Vendor

    WpDevArt

    58 known vulnerabilities in products by WpDevArt, 0 of them actively exploited (CISA KEV).

    Key figures

    58

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in WpDevArt
    CriticalCVE-2021-24442

    Poll, Survey, Questionnaire and Voting system < 1.5.3 - Unauthenticated Blind SQL Injection

    		9.8
    CriticalCVE-2022-3982

    Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload

    		9.8
    CriticalCVE-2017-14125

    WpDevArt Responsive Image Gallery Gallery Album: SQL Injection

    		9.8
    HighCVE-2023-0900

    AP Pricing Tables Lite <= 1.1.6 - Admin+ SQLi

    		7.2
    MediumCVE-2022-1946

    Gallery < 2.0.0 - Reflected Cross-Site Scripting

    		6.1
    HighCVE-2018-10363

    WpDevArt Booking Calendar: security vulnerability

    		7.5
    MediumCVE-2026-8840

    Missing Authorization (CVE-2026-8840)

    		5.3
    HighCVE-2021-34636

    WpDevArt Countdown And Countup\, Woocommerce Sales Timer: Cross-Site Request Forgery (CSRF)

    		8.8
    MediumCVE-2026-16495

    WpDevArt Countdown Timer: Cross-site Scripting

    		6.4
    MediumCVE-2026-73395

    Authorization Bypass Through User-Controlled Key (CVE-2026-73395)

    		6.5
    MediumCVE-2026-15289

    SQL Injection (CVE-2026-15289)

    		5.9
    HighCVE-2024-35750

    WpDevArt Gallery: SQL Injection

    		8.5
    LowCVE-2021-25075

    Duplicate Page or Post < 1.5.1 - Arbitrary Settings Update to Stored XSS

    		3.5
    CriticalCVE-2022-47428

    WpDevArt Booking Calendar: SQL Injection

    		6.7
    MediumCVE-2022-0640

    AP Pricing Tables Lite < 1.1.5 - Reflected Cross-Site Scripting

    		6.1
    HighCVE-2024-9504

    Unrestricted Upload of File with Dangerous Type (CVE-2024-9504)

    		7.2
    MediumCVE-2024-10856

    Booking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL Injection

    		6.5
    HighCVE-2026-25435

    Cross-site Scripting (CVE-2026-25435)

    		7.1
    MediumCVE-2026-57778

    Missing Authorization (CVE-2026-57778)

    		5.3
    HighCVE-2024-30550

    WpDevArt Gallery: Cross-site Scripting

    		7.1
    MediumCVE-2022-50959

    WordPress Contact Form Builder 1.6.1 Cross-Site Scripting via code_generator.php

    		6.1
    HighCVE-2022-47603

    WpDevArt Gallery: Cross-site Scripting

    		7.1
    HighCVE-2023-46075

    Contact Form Builder: Cross-site Scripting

    		7.1
    HighCVE-2025-62886

    WordPress Pricing Table builder plugin <= 1.5.3 - Cross Site Request Forgery (CSRF) vulnerability

    		7.1
    HighCVE-2023-24407

    WpDevArt Booking Calendar: Missing Authorization

    		5.0

    All vulnerabilities in search

    Products

    Products by WpDevArt
    Booking Calendar, Appointment Booking System140
    WpDevArt Booking Calendar80
    Gallery70
    Organization Chart70
    Responsive Image Gallery, Gallery Album60
    Coming soon and Maintenance mode40
    Gallery – Image And Video Gallery With Thumbnails40
    Responsive Vertical Icon Menu40
    Countdown And Countup\, Woocommerce Sales Timer30
    Poll\, Survey\, Questionnaire And Voting System30
    Pricing Table Builder30