← Back

Wp Experts

wp-experts

5 CVEs • 4 products

Products (4)

Click to collapse
Toggle
Protect Wp Admin
protect_wp_admin
2 CVEs
Wp Social Buttons
wp_social_buttons
1 CVE
Custom Share Buttons With Floating Sidebar
custom_share_buttons_with_floating_sidebar
1 CVE
Wp Categories Widget
wp-categories-widget
1 CVE

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-31220
1Wp Experts
1Wp Categories Widget
Jun 17, 2026
Sep 4, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP-EXPERTS.IN TEAM WP Categories Widget plugin <= 2.2 versions.
CVE-2023-3139
1Wp Experts
1Protect Wp Admin
Jun 17, 2026
Jul 4, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The Protect WP Admin WordPress plugin before 4.0 discloses the URL of the admin panel via a redirection of a crafted URL, bypassing the protection offered.
CVE-2022-1717
1Wp Experts
1Custom Share Buttons With Floating Sidebar
Jun 17, 2026
Jun 20, 2022
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
The Custom Share Buttons with Floating Sidebar WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting at...Show more
The Custom Share Buttons with Floating Sidebar WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowedShow less
CVE-2022-0874
1Wp Experts
1Wp Social Buttons
Jun 17, 2026
May 9, 2022
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
The WP Social Buttons WordPress plugin through 2.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability i...Show more
The WP Social Buttons WordPress plugin through 2.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.Show less
CVE-2021-24906
1Wp Experts
1Protect Wp Admin
Jun 17, 2026
Jan 24, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Protect WP Admin WordPress plugin before 3.6.2 does not check for authorisation in the lib/pwa-deactivate.php file, which could allow unauthenticated users to disable the plugin (and therefore the protection offered)...Show more
The Protect WP Admin WordPress plugin before 3.6.2 does not check for authorisation in the lib/pwa-deactivate.php file, which could allow unauthenticated users to disable the plugin (and therefore the protection offered) via a crafted requestShow less