Smub vulnerabilities
We track 22 vulnerabilities in Smub products across 12 products. 22 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
Latest Smub vulnerabilities
- 8.1 High severity
Photo Gallery, Sliders, Proofing and Themes –…: Improper Limitation of a Pathname to a Restricted Directory
The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the handle_job function in all versions up to, and including, 4.5.5 This makes it possib
- 8.1 High severity
Easy Digital Downloads – eCommerce Payments…: Improper Authentication
The Easy Digital Downloads plugin for WordPress is vulnerable to authentication bypass leading to administrator account takeover in all versions up to, and including, 3.7.2. During a PayPal guest checkout, the email address entered in the guest-checkout field
- 8.8 High severity
Photo Gallery, Sliders, Proofing and Themes –…: Unrestricted Upload of File with Dangerous Type
The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the render_image function. This is due to unrestricted mass assignment of caller-suppl
- 7.5 High severity
Photo Gallery, Sliders, Proofing and Themes –…: Unrestricted Upload of File with Dangerous Type
The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the legacy_render function. This is due to broken authorization on the Lightroom galle
- 8.8 High severity
Duplicator – Backups & Migration Plugin –…: Deserialization of Untrusted Data
The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and including, 1.5.17 and 4.6.10, respectively, via deserialization of untrusted database content in DUPX_UpdateEngine::unserializeTest() duri
- 7.2 High severity
WPConsent – Cookie Banner & Cookie Consent for…: Improper Neutralization of Input During Web Page Generation
The WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Simple HTML DOM Parser Noise-Key Restoration (mXSS) in a
- 7.2 High severity
Easy Digital Downloads – eCommerce Payments…: Improper Neutralization of Input During Web Page Generation
The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PayPal IPN Parameters in all versions up to, and including, 3.6.9 due to insufficient input sanitization and outpu
- 7.2 High severity
Smash Balloon Social Post Feed – Simple Social…: Improper Neutralization of Input During Web Page Generation
The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment Message via v-html in Admin Builder Preview in all versions up to, and including, 4.13.0 due to insuff
- 7.2 High severity
Easy Digital Downloads – eCommerce Payments…: Unrestricted Upload of File with Dangerous Type
The Easy Digital Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 3.6.9. This is due to insufficient file type validation in the edd_do_ajax_import_file_upload() function , which only checks the client-suppl
- 8.8 High severity
WPCode – Insert Headers and Footers + Custom…: Improper Control of Generation of Code
The WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.3.5 This is due to the 'wpcode' custom post type being registered without a
- 7.2 High severity
Custom Twitter Feeds – A Tweets Widget or X…: Improper Neutralization of Input During Web Page Generation
The Custom Twitter Feeds plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.5.4. This is due to insufficient output escaping in the CTF_Display_Elements::get_post_text() function when rendering cached tweet text
- 7.2 High severity
ExactMetrics – Google Analytics Dashboard for…: Missing Authorization
The ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation and activation in all versions up to, and including, 9.1.2. This is due to the reports page expo
- 8.8 High severity
Photo Gallery, Sliders, Proofing and Themes –…: Improper Control of Filename for Include/Require Statement in PHP Program
The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.3 via the 'template' parameter in gallery shortcodes. This makes it possible for authenticate
- 8.8 High severity
ExactMetrics – Google Analytics Dashboard for…: Improper Privilege Management
The ExactMetrics – Google Analytics Dashboard for WordPress plugin is vulnerable to Improper Privilege Management in versions 7.1.0 through 9.0.2. This is due to the `update_settings()` function accepting arbitrary plugin setting names without a whitelist of a
- 8.8 High severity
ExactMetrics – Google Analytics Dashboard for…: Authorization Bypass Through User-Controlled Key
The ExactMetrics – Google Analytics Dashboard for WordPress plugin is vulnerable to Insecure Direct Object Reference in versions 8.6.0 through 9.0.2. This is due to the `store_settings()` method in the `ExactMetrics_Onboarding` class accepting a user-supplied
- 7.5 High severity
WP Mail Logging: Deserialization of Untrusted Data
The WP Mail Logging plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.15.0 via deserialization of untrusted input from the email log message field. This is due to the `BaseModel` class constructor calling `maybe
- 8.8 High severity
Photo Gallery, Sliders, Proofing and Themes –…: Improper Control of Filename for Include/Require Statement in PHP Program
The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.59.12 via the 'template' shortcode parameter. This is due to insufficient path validation that
- 7.2 High severity
Giveaways and Contests by RafflePress – Get…: Improper Neutralization of Input During Web Page Generation
The Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple social media username parameters in all versions up to, and including,
- 7.3 High severity
Contact Form & SMTP Plugin for WordPress by…: Improper Control of Generation of Code
The The Contact Form & SMTP Plugin for WordPress by PirateForms plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.6.0. This is due to the software allowing users to execute an action that does not prope
- 9.8 Critical severity
Charitable – Donation Plugin for WordPress –…: Authorization Bypass Through User-Controlled Key
The Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.8.1.14. This is due to the plugin not properly verifying a user's identi
- 7.2 High severity
Easy Digital Downloads – eCommerce Payments…: Deserialization of Untrusted Data
The Easy Digital Downloads – Simple eCommerce for Selling Digital Files plugin for WordPress is vulnerable to deserialization of untrusted input via the 'upload[file]' parameter in versions up to, and including 3.3.3. This makes it possible for authenticated a
- 9.8 Critical severity
Charitable – Donation Plugin for WordPress –…: Improper Privilege Management
The Donation Forms by Charitable plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.7.0.12 due to insufficient restriction on the 'update_core_user' function. This makes it possible for unauthenticated attackers to s