loopus vulnerabilities and threats

12 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.2	EPSS 0.3%	CVE-2026-9253WP Cost Estimation & Payment Forms Builder · Cross-site Scripting High7.2EPSS 0.3%2026-07-09CVE Database V5CVE-2026-9253 The WP Cost Estimation & Payment Forms Builder (E&P Forms) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'customerInfos' parameter in all versions up to, and including, 10.5.97 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. EPSS 0.3%Vulnerability loopus CWE-79	CVE Database V5	2026-07-09
High	7.5	EPSS 0.4%	CVE-2026-24363WP Cost Estimation & Payment Forms Builder · Missing Authorization High7.5EPSS 0.4%2026-03-25CVE Database V5CVE-2026-24363 Missing Authorization vulnerability in loopus WP Cost Estimation & Payment Forms Builder WP_Estimation_Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cost Estimation & Payment Forms Builder: from n/a through < 10.3.0. EPSS 0.4%Vulnerability loopus	CVE Database V5	2026-03-25
Critical	9.3	EPSS 0.3%	CVE-2026-28115WP Attractive Donations System – Easy Stripe & Paypal donations · SQL Injection Critical9.3EPSS 0.3%2026-03-05CVE Database V5CVE-2026-28115 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WP_AttractiveDonationsSystem allows Blind SQL Injection.This issue affects WP Attractive Donations System - Easy Stripe & Paypal donations: from n/a through <= 1.25. EPSS 0.3%Vulnerability loopus	CVE Database V5	2026-03-05
High	7.1	EPSS 0.3%	CVE-2025-22725WP Virtual Assistant · Cross-site Scripting High7.1EPSS 0.3%2026-01-08CVE Database V5CVE-2025-22725 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in loopus WP Virtual Assistant VirtualAssistant allows Stored XSS.This issue affects WP Virtual Assistant: from n/a through <= 3.1. EPSS 0.3%Vulnerability loopus	CVE Database V5	2026-01-08
High	7.5	EPSS 0.4%	CVE-2025-22715WP Attractive Donations System – Easy Stripe & Paypal donations · Missing Authorization High7.5EPSS 0.4%2026-01-08CVE Database V5CVE-2025-22715 Missing Authorization vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WP_AttractiveDonationsSystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Attractive Donations System - Easy Stripe & Paypal donations: from n/a through <= 1.25. EPSS 0.4%Vulnerability loopus	CVE Database V5	2026-01-08
Medium	4.3	EPSS 0.1%	CVE-2025-58999WP Attractive Donations System – Easy Stripe & Paypal donations · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-12-16CVE Database V5CVE-2025-58999 Cross-Site Request Forgery (CSRF) vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WP_AttractiveDonationsSystem allows Cross Site Request Forgery.This issue affects WP Attractive Donations System - Easy Stripe & Paypal donations: from n/a through <= 1.25. EPSS 0.1%Vulnerability loopus CWE-352	CVE Database V5	2025-12-16
Medium	5.3	EPSS 0.3%	CVE-2025-60155WP Virtual Assistant · Missing Authorization Medium5.3EPSS 0.3%2025-09-26CVE Database V5CVE-2025-60155 Missing Authorization vulnerability in loopus WP Virtual Assistant VirtualAssistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Virtual Assistant: from n/a through <= 3.0. EPSS 0.3%Vulnerability loopus CWE-862	CVE Database V5	2025-09-26
High	7.1	EPSS 0.1%	CVE-2025-58956WP Attractive Donations System · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.1%2025-09-22CVE Database V5CVE-2025-58956 Cross-Site Request Forgery (CSRF) vulnerability in loopus WP Attractive Donations System wp-attractive-donations-system-easy-stripe-paypal-donations allows Stored XSS.This issue affects WP Attractive Donations System: from n/a through < 1.29. EPSS 0.1%Vulnerability loopus	CVE Database V5	2025-09-22
High	7.1	EPSS 0.3%	CVE-2024-35737Loopus WP Visitors Tracker · XSS or 'Cross-site Scripting' High7.1EPSS 0.3%2024-06-08CVE Database V5CVE-2024-35737 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Loopus WP Visitors Tracker allows Reflected XSS.This issue affects WP Visitors Tracker: from n/a through 2.3. EPSS 0.3%Vulnerability CWE-79	CVE Database V5	2024-06-08
High	7.1	EPSS 0.4%	CVE-2024-32510Loopus WP Cost Estimation & Payment Forms Builder · Cross-site Scripting High7.1EPSS 0.4%2024-04-17CVE Database V5CVE-2024-32510 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Loopus WP Cost Estimation & Payment Forms Builder allows Reflected XSS.This issue affects WP Cost Estimation & Payment Forms Builder: from n/a through 10.1.75. EPSS 0.4%Vulnerability CWE-79	CVE Database V5	2024-04-17
Medium	6.5	EPSS 0.4%	CVE-2024-32509Loopus WP Cost Estimation & Payment Forms Builder · Missing Authorization Medium6.5EPSS 0.4%2024-04-17CVE Database V5CVE-2024-32509 Missing Authorization vulnerability in Loopus WP Cost Estimation & Payment Forms Builder.This issue affects WP Cost Estimation & Payment Forms Builder: from n/a through 10.1.76. EPSS 0.4%Vulnerability CWE-862	CVE Database V5	2024-04-17
High	8.5	EPSS 0.5%	CVE-2024-30489WP Cost Estimation & Payment Forms Builder · SQL Injection High8.5EPSS 0.5%2024-03-31CVE Database V5CVE-2024-30489 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in loopus WP Cost Estimation & Payment Forms Builder.This issue affects WP Cost Estimation & Payment Forms Builder: from n/a through 10.1.75. EPSS 0.5%Vulnerability loopus CWE-89	CVE Database V5	2024-03-31

Page 1 of 1