Known Vulnerabilities for WordPress-Toolkit by WebPros
Listed below are 10 of the newest known vulnerabilities associated with "WordPress-Toolkit" by "WebPros".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-47365 json | Argument injection vulnerability in WordPress Toolkit before 6.11.0 as used in cPanel & WHM, allows remote authenticated user... | Not Provided | 2026-06-12 | 2026-06-12 |
| CVE-2026-34424 json | Smart Slider 3 Pro version 3.5.1.35 for WordPress and Joomla contains a multi-stage remote access toolkit injected through a ... | Not Provided | 2026-04-09 | 2026-04-09 |
| CVE-2026-6169 json | The affiliate-toolkit plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 3.8.5... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-4314 json | The 'The Ultimate WordPress Toolkit – WP Extended' plugin for WordPress is vulnerable to Privilege Escalation in all versio... | Not Provided | 2026-03-22 | 2026-04-08 |
| CVE-2026-3478 json | The Content Syndication Toolkit plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and ... | Not Provided | 2026-03-21 | 2026-04-08 |
| CVE-2026-2826 json | The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to authorization bypass i... | Not Provided | 2026-04-04 | 2026-04-08 |
| CVE-2025-30796 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Extended The Ultimat... | Not Provided | 2025-04-01 | 2026-04-23 |
| CVE-2024-47386 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Extended The Ultimat... | Not Provided | 2024-10-05 | 2026-04-23 |
| CVE-2024-37259 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Extended The Ultimat... | Not Provided | 2024-07-22 | 2026-04-23 |
| CVE-2024-11600 json | The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to R... | Not Provided | 2025-01-30 | 2026-04-08 |