Known Vulnerabilities for Hpb Seo Plugin For WordPress by Allegro Marketing
Listed below are 10 of the newest known vulnerabilities associated with "Hpb Seo Plugin For WordPress" by "Allegro Marketing".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-112329 json | The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the legacy save_new_message h... | Not Provided | 2026-10-19 | 2026-10-22 |
| CVE-2026-112328 json | The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the add_new_module_term AJAX ... | Not Provided | 2026-10-19 | 2026-10-19 |
| CVE-2026-112111 json | The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the [bs_tconte... | Not Provided | 2026-10-18 | 2026-10-19 |
| CVE-2026-111972 json | The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.5.8 does not verify that a user is authorised to act... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-111971 json | The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.5.8 does not sanitise and escape collection and gall... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-111958 json | The Royal MCP WordPress plugin before 1.5.7 does not limit a preview-link token to the single preview it was issued for, so ... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-111957 json | The SUMIT Payment Gateway for WooCommerce WordPress plugin before 4.0.0 does not bind the payment it confirms with the provid... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-111956 json | The WholesaleX WordPress plugin before 3.0.9 does not protect or remove the user-import file it keeps in a publicly accessib... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-111955 json | The WholesaleX WordPress plugin before 3.0.9 does not check that a stored account confirmation code is set before comparing ... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-111949 json | The miniOrange 2FA WordPress plugin before 6.3.1 does not prevent a pending passkey login from registering an additional pas... | Not Provided | 2026-10-21 | 2026-10-21 |