Vendor

    Wpdevteam

    115 known vulnerabilities in products by Wpdevteam, 0 of them actively exploited (CISA KEV).

    Key figures

    115

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Wpdevteam
    CriticalCVE-2024-1698

    WPDeveloper NotificationX: SQL Injection

    also in 1 other product

    		9.8
    MediumCVE-2026-7665

    Authorization Bypass Through User-Controlled Key (CVE-2026-7665)

    		5.3
    HighCVE-2026-18438

    Unrestricted Upload of File with Dangerous Type (CVE-2026-18438)

    		8.8
    CriticalCVE-2023-4402

    Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products

    also in 1 other product

    		8.1
    HighCVE-2026-15155

    Weak Password Recovery Mechanism for Forgotten Password (CVE-2026-15155)

    		8.8
    HighCVE-2026-112365

    easy.jobs <= 2.8.4 - Unauthenticated Stored Cross-Site Scripting via 'cover_letter' Parameter

    		7.2
    HighCVE-2026-118205

    Improper Privilege Management (CVE-2026-118205)

    		7.4
    HighCVE-2024-3018

    WPDeveloper Essential Addons for Elementor: Deserialization of Untrusted Data

    also in 1 other product

    		8.8
    HighCVE-2023-4386

    Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries

    also in 1 other product

    		8.1
    HighCVE-2026-109513

    Cross-site Scripting (CVE-2026-109513)

    		7.2
    MediumCVE-2026-96256

    Cross-site Scripting (CVE-2026-96256)

    		6.4
    MediumCVE-2026-89330

    EmbedPress <= 4.6.5 - Reflected Cross-Site Scripting via 'hash' and 'unique' Parameters

    		6.1
    MediumCVE-2026-15145

    Cross-site Scripting (CVE-2026-15145)

    		6.4
    MediumCVE-2026-75980

    Cross-site Scripting (CVE-2026-75980)

    		6.4
    HighCVE-2021-4447

    Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation

    also in 1 other product

    		8.8
    MediumCVE-2026-108366

    Cross-site Scripting (CVE-2026-108366)

    		6.4
    MediumCVE-2026-15104

    BetterDocs <= 4.6.0 - Authenticated (Custom+) SQL Injection via 'lang' Parameter

    		6.5
    MediumCVE-2026-109985

    Cross-site Scripting (CVE-2026-109985)

    		6.4
    HighCVE-2024-8979

    WPDeveloper Essential Addons for Elementor: Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		8.0
    MediumCVE-2026-92727

    Cross-site Scripting (CVE-2026-92727)

    		6.4
    MediumCVE-2026-15156

    Cross-site Scripting (CVE-2026-15156)

    		6.4
    MediumCVE-2026-4658

    Cross-site Scripting (CVE-2026-4658)

    		6.4
    HighCVE-2024-1536

    WPDeveloper Essential Addons for Elementor: Cross-site Scripting

    also in 1 other product

    		7.4
    MediumCVE-2026-110721

    Missing Authorization (CVE-2026-110721)

    		5.3
    MediumCVE-2026-12157

    Cross-site Scripting (CVE-2026-12157)

    		6.4

    All vulnerabilities in search

    Products

    Products by Wpdevteam
    Essential Addons For Elementor – Popular Elementor Templates & Widgets500
    Gutenberg Essential Blocks – Page Builder For Gutenberg Blocks & Patterns230
    Embedpress – PDF Embedder, Embed Youtube Videos, 3d Flipbook, Social Feeds, Docs & More170
    Notificationx – Fomo, Live Sales Notification, Woocommerce Sales Popup, Gdpr, Social Proof, Announcement Banner & Floating Notification Bar70
    Betterdocs – Knowledge Base Docs & Faq Solution For Elementor & Block Editor50