Pricing
Case studies
Login
Start trial
WP shop
Agence web Eoxia - Montpellier
Developer
2.6.1
Latest version
70
Installations
No date
Last updated
WordPress Plugin
No VDP
See changelog
Claim ownership
Report vulnerability
Vulnerabilities
Security Contributors
Vulnerability history
4 present
1 patched
2 Mitigation rules
Local File Inclusion vulnerability
<= 2.6.1
Feb 9, 2026
Authenticated (Subscriber+) Privilege Escalation via Account Takeover
2.0.0-2.6.0
May 6, 2025
Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Key Generation
2.0.0-2.6.0
May 6, 2025
CSRF to Arbitrary File Upload vulnerability
<= 2.6.1
Apr 9, 2025
Arbitrary File Upload
<= 1.3.9.5
Mar 9, 2015