Vulnerabilities > Wedevs > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-12-14 | CVE-2023-49860 | Unspecified vulnerability in Wedevs WP Project Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts allows Stored XSS.This issue affects WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts: from n/a through 2.6.7. | 5.4 |
| 2023-09-27 | CVE-2023-41236 | Unspecified vulnerability in Wedevs Happy Addons for Elementor Unauth. | 6.1 |
| 2023-08-30 | CVE-2023-34008 | Cross-site Scripting vulnerability in Wedevs WP ERP Unauth. | 6.1 |
| 2023-07-01 | CVE-2020-36748 | Unspecified vulnerability in Wedevs Dokan The Dokan plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.8. | 4.3 |
| 2023-06-27 | CVE-2023-2743 | Unspecified vulnerability in Wedevs WP ERP The ERP WordPress plugin before 1.12.4 does not sanitise and escape the employee_name parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. | 6.1 |
| 2022-04-04 | CVE-2021-36826 | Unspecified vulnerability in Wedevs WP Project Manager Authenticated (subscriber or higher user role if allowed to access projects) Stored Cross-Site Scripting (XSS) vulnerability in weDevs WP Project Manager plugin <= 2.4.13 versions. | 5.4 |
| 2021-05-17 | CVE-2021-24292 | Unspecified vulnerability in Wedevs Happy Addons for Elementor The Happy Addons for Elementor WordPress plugin before 2.24.0, Happy Addons Pro for Elementor WordPress plugin before 1.17.0 have a number of widgets that are vulnerable to stored Cross-Site Scripting(XSS) by lower-privileged users such as contributors, all via a similar method: The “Card” widget accepts a “title_tag” parameter. | 5.4 |