Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: ajitdas Clear all filters
TI-2026-08063 CVE-2026-9172 · GHSA-3vrh-gvf2-896w

Devs Accounting <= 1.2.0 - Missing Authorization to Unauthenticated Account Deletion via /delete-account/ REST Endpoint

Priority LOW 30

The Devs Accounting – Simple Accounting and Invoicing Solution plugin for WordPress is vulnerable to unauthorized modification/deletion of data due to a missing capability check on the delete_single_account() function in…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0039 Published 2026-06-24 No fix listed CWE-862
TI-2025-11976 CVE-2025-13092 · GHSA-r7fg-3vpg-9rjh

Devs CRM – Manage tasks, attendance and teams all together <= 1.1.8 - Unauthenticated Information Expsoure

Priority LOW 30

The Devs CRM – Manage tasks, attendance and teams all together plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/devs-crm/v1/attendances REST API Endpoint…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0029 Published 2025-12-13 No fix listed CWE-862
TI-2025-11625 CVE-2025-12673 · GHSA-pxx4-9f6r-hw6x

Flex QR Code Generator <= 1.2.7 - Unauthenticated Arbitrary File Upload

Priority HIGH 82

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_qr_code() function in all versions up to, and including, 1.2.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00787 Published 2025-12-06 No fix listed CWE-434
TI-2025-09217 CVE-2025-10041 · GHSA-vxgc-7hwj-cqr5

Flex QR Code Generator <= 1.2.5 - Unauthenticated Arbitrary File Upload

Priority MEDIUM 44

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesave_qr_code_to_db() function in all versions up to, and including, 1.2.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0092 Published 2025-10-15 No fix listed CWE-434