Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

WPExperts Vulnerabilities & CVE List (Oct 2026) | CyStack

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-110365`WordPress Advanced File Manager plugin <= 5.4.14 - Broken Access Control vulnerability	Exploitation statusNot exploited	FixYes	Affected productAdvanced File Manager	Published10/18/2026	SeverityMedium
`CVE-2026-96449`WordPress WP EasyPay plugin <= 4.5.4 - Broken Access Control vulnerability	Exploitation statusNot exploited	FixYes	Affected productWP EasyPay	Published
`CVE-2026-110367`WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability	Exploitation statusNot exploited	FixYes	Affected productAPIExperts Square for WooCommerce
`CVE-2026-62058`WordPress CF7 Apps plugin <= 3.7.2 - Sensitive Data Exposure vulnerability	Exploitation statusNot exploited	FixYes	Affected productCF7 Apps	Published
`CVE-2026-81278`WordPress Post SMTP plugin 4.0.0-beta.1 - Settings Change vulnerability	Exploitation statusNot exploited	FixYes	Affected productPost SMTP	Published
`CVE-2026-32466`WordPress Gravity Forms Bookings premium plugin <= 2.1 - SQL Injection vulnerability	Exploitation statusNot exploited	FixYes	Affected productGravity Forms Bookings premium	Published
`CVE-2026-48838`WordPress Post SMTP plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot exploited	FixYes	Affected productPost SMTP	Published
`CVE-2025-24000`WordPress Post SMTP plugin <= 3.2.0 - Account Takeover Vulnerability	Exploitation statusNot exploited	FixYes	Affected productPost SMTP	Published
`CVE-2024-13844`Post SMTP <= 3.1.2 - Authenticated (Administrator+) SQL Injection via columns Parameter	Exploitation statusNot exploited	FixYes	Affected productPost SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
`CVE-2024-13713`WPExperts Square For GiveWP <= 1.3.1 - Authenticated (Subscriber+) SQL Injection	Exploitation statusNot exploited	FixYes	Affected productWPExperts Square For GiveWP	Published

59 Results | Page 1 of 6

Security vulnerabilities from WPExperts

WPExperts

How many security vulnerabilities does WPExperts have?

Which WPExperts product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular WPExperts products