Hancock11 vulnerabilities
We track 3 vulnerabilities in Hancock11 products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 24, 2026.
Latest Hancock11 vulnerabilities
- 7.5 High severity
WP Forms Connector: Improper Neutralization of Special Elements used in an SQL Command
The WP Forms Connector plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the /wp-json/wp/v3/post/list REST endpoint in versions up to and including 1.8. This is due to insufficient escaping on the user-supplied 'order' parameter
- 7.5 High severity
WP Forms Connector: Missing Authorization
The WP Forms Connector plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.8. The plugin registers the REST route wp/v3/user/list/<id> (callback userDetail()) with permission_callback set to '__return_true', and t
- 9.8 Critical severity
Appy Pie Connect for WooCommerce: Unverified Password Change
The Appy Pie Connect for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within the reset_user_password() REST handler in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated a