Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

saadiqbal Vulnerabilities & CVE List (Oct 2026) | CyStack

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-75962`Post SMTP <= 4.0.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user_email' Parameter (Multisite Registration → Failed Email Log)	Exploitation statusNot exploited	FixYes	Affected productPost SMTP – Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App	Published10/06/2026	SeverityHigh
`CVE-2026-12739`WP Easy Pay <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion	Exploitation statusNot exploited	FixYes	Affected productWP Easy Pay – Payment and Donation Form Builder for Square
`CVE-2026-17149`myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute	Exploitation statusNot exploited	FixYes	Affected productPoints Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
`CVE-2026-15009`Advanced File Manager <= 5.4.12 - Reflected Cross-Site Scripting via postMessage 'soundFile' Parameter	Exploitation statusNot exploited	FixYes	Affected productAdvanced File Manager – Ultimate File Manager for WordPress And Document Library Solution
`CVE-2026-6627`WPFormify <= 1.1.1 - Missing Authorization	Exploitation statusNot exploited	FixYes	Affected productWPFormify – Stripe Payments with Form and Checkout	Published
`CVE-2026-11995`Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 - Missing Authorization to Unauthenticated Arbitrary Form Entry Modification/Trash via process_bulk_action()	Exploitation statusNot exploited	FixYes	Affected productGutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder
`CVE-2026-12144`Wholesale for WooCommerce <= 2.0.5 - Authenticated (Author+) Privilege Escalation via 'user_role_set' Parameter	Exploitation statusNot exploited	FixYes	Affected productWholesale for WooCommerce
`CVE-2026-12738`WP Easy Pay <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Status Modification via wpep_draft_confirm AJAX Action	Exploitation statusNot exploited	FixYes	Affected productWP Easy Pay – Payment and Donation Form Builder for Square
`CVE-2026-12097`User Management <= 1.2 - Missing Authorization to Unauthenticated Plugin Settings Modification	Exploitation statusNot exploited	FixYes	Affected productUser Management	Published
`CVE-2026-8607`myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrap' Shortcode Attribute	Exploitation statusNot exploited	FixYes	Affected productPoints Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred

53 Results | Page 1 of 6

Security vulnerabilities from saadiqbal

saadiqbal

How many security vulnerabilities does saadiqbal have?

Which saadiqbal product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular saadiqbal products