HOMEVULNERABILITIESVENDORSHmplugin

HmpluginCVEs & Vulnerabilities

6 CVEs affecting Hmplugin products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

6 CVEs→ All vendors

Most Affected Products

jobwp 2accept stripe donation - aidwp 1aidwp 1hm multiple roles 1wordpress books gallery 1
CVE-2024-50459CRITICAL

Missing Authorization vulnerability in Hossni Mubarak AidWP wp-stripe-donation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AidWP: from n/a through <= 3.2.3.

29 Oct 2024
9.8
CVSS
CVE-2023-48288HIGH

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin – JobWP.This issue affects WordPress Job Board and Recruitment Plugin – JobWP: from n/a through 2.1.

21 Dec 2023
7.5
CVSS
CVE-2023-29384CRITICAL

Unrestricted Upload of File with Dangerous Type vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin – JobWP.This issue affects WordPress Job Board and Recruitment Plugin – JobWP: from n/a through 2.0.

20 Dec 2023
9.8
CVSS
CVE-2023-23705HIGH

Cross-Site Request Forgery (CSRF) vulnerability in HM Plugin WordPress Books Gallery plugin <= 4.4.8 versions.

23 May 2023
8.8
CVSS
CVE-2022-47422HIGH

Cross-Site Request Forgery (CSRF) vulnerability in HM Plugin Accept Stripe Donation – AidWP plugin <= 3.1.5 versions.

14 Mar 2023
8.8
CVSS
CVE-2021-24602HIGH

The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set themselves as admin via their profile page

23 Aug 2021
8.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database