Pricing
Case studies
Login
Start trial
WP shop
Agence web Eoxia - Montpellier
Developer
2.6.1
Latest version
60
Installations
No date
Last updated
WordPress Plugin
No VDP
See changelog
Claim ownership
Report vulnerability
Vulnerabilities
Security Contributors
Vulnerability history
4 present
1 patched
2 Mitigation rules
Local File Inclusion vulnerability
<= 2.6.1
09/02/2026
Authenticated (Subscriber+) Privilege Escalation via Account Takeover
2.0.0-2.6.0
06/05/2025
Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Key Generation
2.0.0-2.6.0
06/05/2025
CSRF to Arbitrary File Upload vulnerability
<= 2.6.1
09/04/2025
Arbitrary File Upload
<= 1.3.9.5
09/03/2015