Logo Manager For Enamad – لوگوی نماد الکترونیکی

Logo Manager For Enamad – لوگوی نماد الکترونیکی has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF).

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

2 independent researchers contributed these findings, most of them (2) reported by Bob Matyas. Logo Manager For Enamad – لوگوی نماد الکترونیکی is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

5.6/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all Logo Manager For Enamad – لوگوی نماد الکترونیکی vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2026-6549

Logo Manager For Enamad <= 0.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute

Read the full analysis

Vulnerability Records

3 records


2026-05-19 12:11	Logo Manager For Enamad <= 0.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute Logo Manager For Enamad <= 0.7.4	`CVE-2026-6549`	6.4 Medium	zaim	No
2024-08-27 00:00	Logo Manager For Enamad <= 0.7.2 - Authenticated (Admin+) Stored Cross-Site Scripting Logo Manager For Enamad <= 0.7.2	`CVE-2024-5170`	4.4 Medium	Bob Matyas	Yes
2024-06-04 00:00	Logo Manager For Enamad <= 0.7.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting Logo Manager For Enamad <= 0.7.0	`CVE-2024-4757`	6.1 Medium	Bob Matyas	Yes

Showing 1–3 of 3 reports

Latestv0.7.5

Logo Manager For Enamad – لوگوی نماد الکترونیکی

Author

Omid Shamloo

4.4(7)

88/100

Last Updated

2026-05-28 (4mo ago)

Active Installs

5,000+

Downloads

86,184

Requires WP

3.0+

Requires PHP

Tested up to

WP 7.0.4

Created

2015-09-21 (11y ago)

just for Iranian sites who uses enamad.ir service با این پلاگین به‌صورت خودکار کد نماد الکترونیکی سایت را مدیریت می کنید This plugin is licensed under the Apache License, Version 2.0. 0.7.4 small fix (نمایش خودکار با اینکه غیرفعال بود اما باز نمایش داده میشد.) 0.7.3 escape $title var in widget output 0.7.2 xss in admin widget area – fixed 0.7.1 wp-nonce implemented 0.7 امکان لود عکس ثابت به جای اینماد اصلی برا افزایش سرعت سایت 0.6 بروزرسانی توابع منقضی افزودن امکان نمادهای دیگر در قالب ابزارک و کدکوتاه هماهنگی با ویژوآل کامپوزر افزدن امکان غیرفعال سازی در حالت موبایل 0.5 سازگاری با نسخه های جدید php 0.4 حل مشکل غیر فعال شدن ابزارک با غیرفعال کردن نمایش خودکار 0.3 حل مشکل زیر قسمت های سایت مخفی شدن 0.2 سازگاری با تغییرات جدید سایت نماد الکترونیکی / تنظیمات کد در مدیرت برای نسخه جدید فراموش نشود. 0.1 ver 0.1 released.

View on WordPress.org