Saad Iqbal vulnerabilities and threats

46 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3	EPSS 0.3%	CVE-2026-84762Saad Iqbal WP EasyPay · External Control of Assumed-Immutable Web Parameter Medium5.3EPSS 0.3%2026-09-03CVE Database V5CVE-2026-84762 Unauthenticated Bypass Vulnerability in WP EasyPay <= 4.5.3 versions. EPSS 0.3%Vulnerability CWE-472	CVE Database V5	2026-09-03
High	7.1	EPSS 0.3%	CVE-2026-73345License Manager for WooCommerce (WordPress plugin) · SQL Injection High7.1EPSS 0.3%2026-08-18CVE Database V5CVE-2026-73345 Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions. EPSS 0.3%Vulnerability Saad Iqbal CWE-89	CVE Database V5	2026-08-18
Medium	6.5	EPSS 0.4%	CVE-2026-66425Gutena Forms (WordPress plugin) · Authentication Bypass Using an Alternate Path or Channel Medium6.5EPSS 0.4%2026-08-06CVE Database V5CVE-2026-66425 Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 versions. EPSS 0.4%Vulnerability Saad Iqbal CWE-288 #ghsa-x5q8-337f-2588	CVE Database V5	2026-08-06
Medium	6.5	EPSS 0.3%	CVE-2026-57808Saad Iqbal WP EasyPay · Missing Authorization Medium6.5EPSS 0.3%2026-07-23CVE Database V5CVE-2026-57808 Subscriber Arbitrary Content Deletion in WP EasyPay <= 4.5.0 versions. EPSS 0.3%Vulnerability CWE-862	CVE Database V5	2026-07-23
Medium	5.4	EPSS 0.3%	CVE-2026-61968myCred (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.3%2026-07-13CVE Database V5CVE-2026-61968 Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through <= 3.1.2. EPSS 0.3%Vulnerability Saad Iqbal CWE-862	CVE Database V5	2026-07-13
Medium	5.4	EPSS 0.3%	CVE-2026-61958License Manager for WooCommerce (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.3%2026-07-13CVE Database V5CVE-2026-61958 Missing Authorization vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects License Manager for WooCommerce: from n/a through <= 3.0.17. EPSS 0.3%Vulnerability Saad Iqbal CWE-862	CVE Database V5	2026-07-13
High	8.5	EPSS 0.4%	CVE-2026-57810APIExperts Square for WooCommerce (WordPress plugin) · SQL Injection High8.5EPSS 0.4%2026-07-13CVE Database V5CVE-2026-57810 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExperts Square for WooCommerce woosquare allows Blind SQL Injection.This issue affects APIExperts Square for WooCommerce: from n/a through <= 4.7.4. EPSS 0.4%Vulnerability Saad Iqbal CWE-89	CVE Database V5	2026-07-13
High	8.3	EPSS 0.3%	CVE-2026-54848APIExperts Square for WooCommerce (WordPress plugin) · Insertion of Sensitive Information Into Sent Data High8.3EPSS 0.3%2026-06-25CVE Database V5CVE-2026-54848 Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal APIExperts Square for WooCommerce allows Retrieve Embedded Sensitive Data. This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.3. EPSS 0.3%Vulnerability Saad Iqbal CWE-201	CVE Database V5	2026-06-25
Medium	6.5	EPSS 0.2%	CVE-2026-56024Saad Iqbal WP EasyPay · Cross-Site Request Forgery (CSRF) Medium6.5EPSS 0.2%2026-06-18CVE Database V5CVE-2026-56024 Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal WP EasyPay allows Cross Site Request Forgery. This issue affects WP EasyPay: from n/a through 4.5.0. EPSS 0.2%Vulnerability CWE-352	CVE Database V5	2026-06-18
Medium	5.3	EPSS 0.2%	CVE-2026-45215Saad Iqbal WP EasyPay · Insertion of Sensitive Information Into Sent Data Medium5.3EPSS 0.2%2026-05-12CVE Database V5CVE-2026-45215 Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP EasyPay: from n/a through <= 4.3.0. EPSS 0.2%Vulnerability	CVE Database V5	2026-05-12
High	8.5	EPSS 0.2%	CVE-2026-45211APIExperts Square for WooCommerce (WordPress plugin) · SQL Injection High8.5EPSS 0.2%2026-05-12CVE Database V5CVE-2026-45211 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExperts Square for WooCommerce woosquare allows Blind SQL Injection.This issue affects APIExperts Square for WooCommerce: from n/a through <= 4.7.1. EPSS 0.2%Vulnerability Saad Iqbal	CVE Database V5	2026-05-12
Medium	6.5	EPSS 0.3%	CVE-2026-25390New User Approve (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2026-03-25CVE Database V5CVE-2026-25390 Missing Authorization vulnerability in Saad Iqbal New User Approve new-user-approve allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects New User Approve: from n/a through <= 3.2.3. EPSS 0.3%Vulnerability Saad Iqbal	CVE Database V5	2026-03-25
High	8.5	EPSS 0.2%	CVE-2026-25001Post Snippets (WordPress plugin) · Code Injection High8.5EPSS 0.2%2026-03-25CVE Database V5CVE-2026-25001 Improper Control of Generation of Code ('Code Injection') vulnerability in Saad Iqbal Post Snippets post-snippets allows Remote Code Inclusion.This issue affects Post Snippets: from n/a through <= 4.0.12. EPSS 0.2%Vulnerability Saad Iqbal	CVE Database V5	2026-03-25
Medium	5.4	EPSS 0.2%	CVE-2026-32587Saad Iqbal WP EasyPay · Missing Authorization Medium5.4EPSS 0.2%2026-03-16CVE Database V5CVE-2026-32587 Missing Authorization vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP EasyPay: from n/a through <= 4.2.11. EPSS 0.2%Vulnerability	CVE Database V5	2026-03-16
High	8.6	EPSS 0.3%	CVE-2025-69063New User Approve (WordPress plugin) · Missing Authorization High8.6EPSS 0.3%2026-02-20CVE Database V5CVE-2025-69063 Missing Authorization vulnerability in Saad Iqbal New User Approve new-user-approve allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects New User Approve: from n/a through <= 3.2.0. EPSS 0.3%Vulnerability Saad Iqbal	CVE Database V5	2026-02-20
Medium	6.5	EPSS 0.2%	CVE-2026-27440myCred (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-02-19CVE Database V5CVE-2026-27440 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred mycred allows Stored XSS.This issue affects myCred: from n/a through <= 2.9.7.6. EPSS 0.2%Vulnerability Saad Iqbal	CVE Database V5	2026-02-19
Medium	4.3	EPSS 0.2%	CVE-2026-24951myCred (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2026-02-03CVE Database V5CVE-2026-24951 Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through <= 2.9.7.3. EPSS 0.2%Vulnerability Saad Iqbal	CVE Database V5	2026-02-03
High	8.5	EPSS 0.3%	CVE-2025-68881AppExperts (WordPress plugin) · SQL Injection High8.5EPSS 0.3%2026-01-22CVE Database V5CVE-2025-68881 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal AppExperts appexperts allows SQL Injection.This issue affects AppExperts: from n/a through <= 1.4.5. EPSS 0.3%Vulnerability Saad Iqbal	CVE Database V5	2026-01-22
Medium	4.3	EPSS 0.1%	CVE-2025-63040Post Snippets (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-12-31CVE Database V5CVE-2025-63040 Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal Post Snippets post-snippets allows Cross Site Request Forgery.This issue affects Post Snippets: from n/a through <= 4.0.11. EPSS 0.1%Vulnerability Saad Iqbal	CVE Database V5	2025-12-31
Medium	6.5	EPSS 0.2%	CVE-2025-68080User Avatar (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-12-16CVE Database V5CVE-2025-68080 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal User Avatar - Reloaded user-avatar-reloaded allows Stored XSS.This issue affects User Avatar - Reloaded: from n/a through <= 1.2.2. EPSS 0.2%Vulnerability Saad Iqbal	CVE Database V5	2025-12-16

Page 1 of 3