Pricing
Case studies
Login
Start trial
WP shop
Agence web Eoxia - Montpellier
Developer
2.6.1
Latest version
90
Installations
No date
Last updated
WordPress Plugin
No VDP
See changelog
Claim ownership
Report vulnerability
Vulnerabilities
Security Contributors
Vulnerability history
3 present
1 fixed
1 Mitigation rules
Authenticated (Subscriber+) Privilege Escalation via Account Takeover
2.0.0-2.6.0
May 6, 2025
Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Key Generation
2.0.0-2.6.0
May 6, 2025
CSRF to Arbitrary File Upload vulnerability
<= 2.6.1
Apr 9, 2025
Arbitrary File Upload
<= 1.3.9.5
Mar 9, 2015