Saadiqbal vulnerabilities
We track 14 vulnerabilities in Saadiqbal products across 8 products. 14 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.
Latest Saadiqbal vulnerabilities
- 7.5 High severity
Email Templates Customizer and Designer for…: Missing Authorization
The Email Templates Customizer and Designer for WordPress and WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.14 This is due to the plugin not properly verifying that a user is authorized to perf
- 7.2 High severity
Post SMTP – Complete Email Delivery and SMTP…: Improper Neutralization of Input During Web Page Generation
The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_email' parameter in all versions up to, and including, 4.0.1 due t
- 8.2 High severity
WPFormify – Stripe Payments with Form and…: Missing Authorization
The WPFormify – Stripe Payments with Form and Checkout plugin for WordPress is vulnerable to unauthorized modification and deletion of Stripe payment credentials in all versions up to, and including, 1.1.1. This is due to missing capability checks and nonce ve
- 8.8 High severity
Wholesale for WooCommerce: Improper Privilege Management
The Wholesale for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.5. This is due to the `save_requests_meta()` function applying only `sanitize_text_field()` to the `user_role_set` POST parameter
- 7.2 High severity
Post SMTP – Complete Email Deliverability and…: Improper Neutralization of Input During Web Page Generation
The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘event_type’ parameter in all versions up to, and including, 3.8.0 due t
- 7.3 High severity
New User Approve: Missing Authorization
The New User Approve plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on multiple REST API endpoints in all versions up to, and including, 3.2.2. This makes it possible for unauthentic
- 9.8 Critical severity
Post SMTP – Complete Email Deliverability and…: Missing Authorization
The Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the __construct function in all versions up to, and including, 3.6.0. This
- 7.5 High severity
Advanced File Manager — Ultimate WordPress…: Unrestricted Upload of File with Dangerous Type
The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fma_local_file_system' function in versions 5.2.12 to 5.2.13. This makes it possible for authenticated attackers, with Subscriber
- 7.5 High severity
Advanced File Manager – Ultimate File Manager…: Unrestricted Upload of File with Dangerous Type
The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'class_fma_connector.php' file in all versions up to, and including, 5.2.10. This makes it possible for authenticated attackers,
- 7.2 High severity
Advanced File Manager – Ultimate File Manager…: Improper Limitation of a Pathname to a Restricted Directory
The Advanced File Manager plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 5.2.8 via the 'fma_locale' parameter. This makes it possible for authenticated attackers, with Administrator-level access and
- 8.8 High severity
Advanced File Manager – Ultimate File Manager…: Unrestricted Upload of File with Dangerous Type
The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads via the 'class_fma_connector.php' file in all versions up to, and including, 5.2.8. This makes it possible for authenticated attackers, with Subscriber-level access and abov
- 7.5 High severity
Advanced File Manager – Ultimate File Manager…: Insecure Storage of Sensitive Information
The Advanced File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.4 via the 'fma_local_file_system' function. This makes it possible for unauthenticated attackers to extract sensitive data
- 7.2 High severity
Post SMTP – Complete Email Deliverability and…: Improper Neutralization of Special Elements used in an SQL Command
The POST SMTP – The #1 WordPress SMTP Plugin with Advanced Email Logging and Delivery Failure Notifications plugin for WordPress is vulnerable to time-based SQL Injection via the selected parameter in all versions up to, and including, 2.9.3 due to insufficien
- 9.8 Critical severity
Post SMTP – Complete Email Deliverability and…: Missing Authorization
The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a type juggling issue on the connect-app REST endpoint in all ve