Read the docs

ajitdas

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

ajitdas records in CISA KEV

No ajitdas vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2025-11625 CVE-2025-12673 · GHSA-pxx4-9f6r-hw6x

Flex QR Code Generator <= 1.2.7 - Unauthenticated Arbitrary File Upload

Priority HIGH 82

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_qr_code() function in all versions up to, and including, 1.2.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00787 Published 2025-12-06 No fix listed CWE-434
TI-2025-09217 CVE-2025-10041 · GHSA-vxgc-7hwj-cqr5

Flex QR Code Generator <= 1.2.5 - Unauthenticated Arbitrary File Upload

Priority MEDIUM 44

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesave_qr_code_to_db() function in all versions up to, and including, 1.2.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0092 Published 2025-10-15 No fix listed CWE-434
TI-2026-08063 CVE-2026-9172 · GHSA-3vrh-gvf2-896w

Devs Accounting <= 1.2.0 - Missing Authorization to Unauthenticated Account Deletion via /delete-account/ REST Endpoint

Priority LOW 30

The Devs Accounting – Simple Accounting and Invoicing Solution plugin for WordPress is vulnerable to unauthorized modification/deletion of data due to a missing capability check on the delete_single_account() function in…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0039 Published 2026-06-24 No fix listed CWE-862
TI-2025-11976 CVE-2025-13092 · GHSA-r7fg-3vpg-9rjh

Devs CRM – Manage tasks, attendance and teams all together <= 1.1.8 - Unauthenticated Information Expsoure

Priority LOW 30

The Devs CRM – Manage tasks, attendance and teams all together plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/devs-crm/v1/attendances REST API Endpoint…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0029 Published 2025-12-13 No fix listed CWE-862
Open these records in search →