PatchTheCVEwpdevart vulnerabilities
Recent CVEs affecting wpdevart products. 4 tracked.
wpdevart has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-01-02. Highest priority: CVE-2023-0177 (score 34/100).
- CVE-2023-0177 MEDIUM 5.4 UPGRADE The Social Like Box and Page by WpDevArt WordPress plugin before 0.8.41 does not validate and escape some of i
- CVE-2024-10856 MEDIUM 6.5 UPGRADE The Booking Calendar WpDevArt plugin is vulnerable to time-based, blind SQL injection via the `id` parameter i
- CVE-2023-45631 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Exploiting Inco
- CVE-2023-24407 MEDIUM 5.0 UPGRADE Missing Authorization vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Exploiting
FAQ
How do I fix wpdevart vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wpdevart being exploited right now?
None of the tracked wpdevart CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wpdevart CVE should I patch first?
CVE-2023-0177 currently ranks highest (34/100): The Social Like Box and Page by WpDevArt WordPress plugin before 0.8.41 does not validate and escape some of i.