NotFound vulnerabilities

We track 13 vulnerabilities in NotFound products across 10 products. 13 are rated high or critical, and none are known to be exploited. The most recent was published on April 15, 2025.

13vulnerabilities

2critical

11high

0exploited

7.8average CVSS score

Latest NotFound vulnerabilities

9.6 Critical severity
WPJobBoard: Cross-Site Request Forgery
CVE-2025-30967Apr 15, 2025NotFound
Cross-Site Request Forgery (CSRF) vulnerability in NotFound WPJobBoard allows Upload a Web Shell to a Web Server. This issue affects WPJobBoard: from n/a through n/a.
7.5 High severity
Unlimited Timeline: Missing Authorization
CVE-2025-27008Apr 15, 2025NotFound
Missing Authorization vulnerability in NotFound Unlimited Timeline unlimited-timeline allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Unlimited Timeline: from n/a through < 1.6.1.
7.5 High severity
Macro Calculator with Admin Email Optin & Data: Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2025-26730Apr 15, 2025NotFound
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NotFound Macro Calculator with Admin Email Optin & Data. This issue affects Macro Calculator with Admin Email Optin & Data: from n/a through 1.0.
7.1 High severity
Global Gallery: Improper Neutralization of Input During Web Page Generation
CVE-2025-22263Apr 15, 2025NotFound
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Global Gallery allows Reflected XSS. This issue affects Global Gallery: from n/a through 8.8.0.
7.1 High severity
PrivateContent: Improper Neutralization of Input During Web Page Generation
CVE-2025-26972Mar 15, 2025NotFound
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound PrivateContent. This issue affects PrivateContent: from n/a through 8.11.5.
7.1 High severity
Callback Request: Improper Neutralization of Input During Web Page Generation
CVE-2025-25129Mar 3, 2025NotFound
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Callback Request allows Reflected XSS. This issue affects Callback Request: from n/a through 1.4.
10.0 Critical severity
Chaty Pro: Unrestricted Upload of File with Dangerous Type
CVE-2025-26776Feb 22, 2025NotFound
Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Chaty Pro allows Upload a Web Shell to a Web Server. This issue affects Chaty Pro: from n/a through 3.3.3.
7.1 High severity
Ad Inserter Pro: Improper Neutralization of Input During Web Page Generation
CVE-2025-22680Feb 16, 2025NotFound
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Ad Inserter Pro allows Reflected XSS. This issue affects Ad Inserter Pro: from n/a through 2.7.39.
7.1 High severity
WPJobBoard: Improper Neutralization of Input During Web Page Generation
CVE-2025-24781Feb 3, 2025NotFound
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WPJobBoard allows Reflected XSS. This issue affects WPJobBoard: from n/a through 5.10.1.
7.5 High severity
Admin and Site Enhancements (ASE) Pro: Incorrect Privilege Assignment
CVE-2024-43333Feb 3, 2025NotFound
Incorrect Privilege Assignment vulnerability in NotFound Admin and Site Enhancements (ASE) Pro allows Privilege Escalation. This issue affects Admin and Site Enhancements (ASE) Pro: from n/a through 7.6.2.1.
8.5 High severity
Hero Mega Menu - Responsive WordPress Menu…: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-49333Jan 21, 2025NotFound
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows SQL Injection. This issue affects Hero Mega Menu - Responsive WordPress Menu Plugin: from n/
8.5 High severity
Hero Mega Menu - Responsive WordPress Menu…: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-49303Jan 21, 2025NotFound
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows SQL Injection. This issue affects Hero Mega Menu - Responsive WordPress Menu Plugin: from n/
7.1 High severity
Hero Mega Menu - Responsive WordPress Menu…: Improper Neutralization of Input During Web Page Generation
CVE-2024-49300Jan 21, 2025NotFound
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows Reflected XSS. This issue affects Hero Mega Menu - Responsive WordPress Menu Plugin: from n/