WPMinds vulnerabilities
We track 3 vulnerabilities in WPMinds products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 17, 2025.
Latest WPMinds vulnerabilities
- 7.5 High severity
Simple WP Events: Insertion of Sensitive Information Into Sent Data
Insertion of Sensitive Information Into Sent Data vulnerability in WPMinds Simple WP Events simple-wp-events allows Retrieve Embedded Sensitive Data.This issue affects Simple WP Events: from n/a through <= 1.8.17.
- 7.5 High severity
Simple WP Events: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPMinds Simple WP Events simple-wp-events allows Path Traversal.This issue affects Simple WP Events: from n/a through <= 1.8.17.
- 9.1 Critical severity
Simple WP Events: External Control of File Name or Path
The Simple WP Events plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the wpe_delete_file AJAX action in all versions up to, and including, 1.8.17. This makes it possible for unauthenticated attackers to