Pricing
Case studies
Login
Start trial
Paid Memberships Pro
N/A
Developer
N/A
Latest version
N/A
Installations
N/A
Last updated
WordPress Plugin
No VDP
Claim ownership
Report vulnerability
Vulnerabilities
Security Contributors
Vulnerability history
0 present
25 patched
6 Mitigation rules
Cross-Site Request Forgery to Level Orders Update vulnerability
<= 2.12.7
03/02/2026
Contributor+ Arbitrary User Custom Field Disclosure vulnerability
< 2.12.9
30/01/2026
Authenticated SQL Injection vulnerability
<= 3.0.5
04/07/2024
Insecure Direct Object References (IDOR) vulnerability
<= 3.0.4
28/06/2024
Cross-Site Request Forgery to Membership Modification vulnerability
<= 2.12.10
19/06/2024
Cross Site Request Forgery (CSRF) vulnerability
<= 2.12.10
22/04/2024
Cross Site Request Forgery (CSRF) vulnerability
<= 2.12.10
22/04/2024
Cross-Site Request Forgery vulnerability
<= 3.0.1
16/04/2024
Cross-Site Request Forgery vulnerability
<= 2.12.10
11/04/2024
Cross-Site Request Forgery vulnerability
<= 2.12.10
11/04/2024
Authenticated (Contributor+) User Meta Disclosure vulnerability
<= 2.12.8
12/02/2024
Information Exposure in Debug Logs vulnerability
<= 2.12.6
15/01/2024
Missing Authorization via API vulnerability
<= 2.12.5
21/12/2023
Auth. SQL Injection (SQLi) vulnerability
<= 2.9.11
28/02/2023
Contributor+ Stored XSS via Shortcode vulnerability
< 2.9.9
23/01/2023
Unauthenticated SQL Injection Vulnerability
<= 2.9.7
14/01/2023
Unauthenticated Blind SQL Injection (SQLi) vulnerability
<= 2.6.6
07/01/2022
Reflected Cross-Site Scripting (XSS) vulnerability
<= 2.6.5
23/11/2021
Insecure Direct Object Reference & sensitive information disclosure vulnerability
<= 2.5.2
06/02/2021
Authenticated Cross-Site Scripting (XSS) vulnerability
<= 2.5
03/12/2020
Cross-Site Request Forgery (CSRF) vulnerability
<= 2.4.2
16/09/2020
Authenticated SQL Injection (SQLi) vulnerability
<= 2.3.2
19/05/2020
Authenticated Open Redirect vulnerability
<= 2.0.5
11/06/2019
Directory Traversal
<= 1.7.14
13/11/2014
Information Disclosure
<= 1.4.7
01/08/2014