Davidanderson vulnerabilities
We track 6 vulnerabilities in Davidanderson products across 5 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on October 17, 2026.
Latest Davidanderson vulnerabilities
- 7.2 High severity
European VAT Compliance Assistant for…: Improper Neutralization of Input During Web Page Generation
The European VAT Compliance Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via CF-IPCountry Header in all versions up to, and including, 1.36.10 due to insufficient input sanitization and output escaping. This makes
- 8.1 High severity
UpdraftPlus: WP Backup & Migration Plugin: Improper Verification of Cryptographic Signature
The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.26.4 via the UpdraftPlus_Remote_Communications_V2::wp_loaded function. This is due to insufficient validation of t
- 7.2 High severity
All-In-One Security (AIOS) – Security and…: Improper Neutralization of Input During Web Page Generation
The All-In-One Security (AIOS) – Security and Firewall plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 5.4.7. This is due to insufficient input sanitization in the get_rest_route() function and missing output e
- 8.1 High severity
WP-Optimize – Cache, Compress images, Minify &…: Improper Limitation of a Pathname to a Restricted Directory
The WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the unscheduled_original_file_deletion function in all
- 8.8 High severity
UpdraftPlus: WP Backup & Migration Plugin: Deserialization of Untrusted Data
The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions from 1.23.8 to 1.24.11 via deserialization of untrusted input in the 'recursive_unserialized_replace' function. This makes it possible for
- 7.2 High severity
Redux Framework: Unrestricted Upload of File with Dangerous Type
The Redux Framework plugin for WordPress is vulnerable to unauthenticated JSON file uploads due to missing authorization and capability checks on the Redux_Color_Scheme_Import function in versions 4.4.12 to 4.4.17. This makes it possible for unauthenticated at