CMSSuperHeroes vulnerabilities
We track 3 vulnerabilities in CMSSuperHeroes products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 20, 2025.
Latest CMSSuperHeroes vulnerabilities
- 9.8 Critical severity
Flex Store Users: Improper Privilege Management
The Flex Store Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.0. This is due to the 'fsUserHandle::signup' and the 'fsSellerRole::add_role_seller' functions not restricting what user roles a user can
- 10.0 Critical severity
Wastia: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in CMSSuperHeroes Wastia wastia allows Upload a Web Shell to a Web Server.This issue affects Wastia: from n/a through < 1.1.3.
- 10.0 Critical severity
Clanora: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in CMSSuperHeroes Clanora clanora allows Using Malicious Files.This issue affects Clanora: from n/a through < 1.3.1.