Awesomemotive vulnerabilities
We track 5 vulnerabilities in Awesomemotive products across 4 products. 5 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on November 4, 2026.
Latest Awesomemotive vulnerabilities
- 7.1 High severity
Contact Form by WPForms: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Awesomemotive Contact Form by WPForms wpforms-lite allows Reflected XSS.This issue affects Contact Form by WPForms: from n/a through 2.0.3.
- 7.5 High severity
Easy Digital Downloads: Missing Authorization
Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.7.1.
- 9.3 Critical severity
NextGEN Gallery: Improper Neutralization of Special Elements used in an SQL Command
NextGEN Gallery version prior to 4.2.1 are vulnerable to authenticated SQL injection via the 'orderby' parameter on the REST API endpoints '/imagely/v1/galleries' and '/imagely/v1/albums'. The root cause is an insufficient sanitization function ('_clean_column
- 7.5 High severity
Duplicator – WordPress Migration Plugin: Direct Request
The Duplicator WordPress plugin before 1.4.7 discloses the url of the a backup to unauthenticated visitors accessing the main installer endpoint of the plugin, if the installer script has been run once by an administrator, allowing download of the full site ba
- 7.5 High severity
WordPress Snap Creek Duplicator Plugin File Download Exploited
The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init.