CyberSecBulletin

MoreConvert vulnerabilities

We track 2 vulnerabilities in MoreConvert products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 5, 2026.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest MoreConvert vulnerabilities

  • 9.8 Critical severity

    MoreConvert Pro: Improper Authentication

    CVE-2026-5722MoreConvert

    The MoreConvert Pro plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.9.14. This is due to the guest waitlist verification flow not invalidating or regenerating verification tokens when the customer email addre

  • 7.5 High severity

    MoreConvert Wishlist for WooCommerce: Authorization Bypass Through User-Controlled Key

    CVE-2024-13694MoreConvert

    The WooCommerce Wishlist (High customization, fast setup,Free Elementor Wishlist, most features) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.7 via the download_pdf_file() function due to miss