Webula

2025

Critical

High

Medium

Low

Global Rank

#296

of 3,213 researchers

Vulns

16

Critical0

High1

Medium15

Low0

Affected Assets

16

16plugins

Avg CVSS

5.4

Average score of vulnerabilities

Researcher Submissions

16 records


2025-04-04 00:00	Split Test For Elementor <= 1.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting Split Test For Elementor <= 1.8.4	`CVE-2025-32135`	5.5 Medium	Webula	Yes
2025-04-01 00:00	Beam me up Scotty – Back to Top Button <= 1.0.23 - Authenticated (Administrator+) Stored Cross-Site Scripting Beam me up Scotty <= 1.0.23	`CVE-2025-31864`	4.4 Medium	Webula	No
2025-03-27 00:00	SEO Plugin by Squirrly SEO <= 12.4.03 - Authenticated (Contributor+) SQL Injection GEO Plugin by Squirrly SEO <= 12.4.03	`CVE-2025-22783`	6.5 Medium	Webula	Yes
2025-03-27 00:00	Newsletters <= 4.9.9.7 - Authenticated (Administrator+) SQL Injection Newsletters <= 4.9.9.7	`CVE-2025-30921`	4.9 Medium	Webula	Yes
2025-03-03 00:00	PublishPress Authors <= 4.7.3 - Authenticated (Administrator+) SQL Injection Co-Authors <= 4.7.3	`CVE-2025-26886`	4.9 Medium	Webula	Yes
2025-02-23 00:00	Poll Maker <= 5.6.5 - Authenticated (Administrator+) SQL Injection Poll Maker by AYS <= 5.6.5	`CVE-2025-26971`	4.9 Medium	Webula	Yes
2025-02-14 00:00	Vertex Addons for Elementor <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Vertex Addons for Elementor <= 1.2.0	`CVE-2025-26769`	6.4 Medium	Webula	Yes
2025-02-03 00:00	Payment Forms for Paystack <= 4.0.1 - Authenticated (Administrator+) SQL Injection Payment Forms for Paystack <= 4.0.1	`CVE-2025-22652`	4.9 Medium	Webula	Yes
2025-02-03 00:00	SendPulse Email Marketing Newsletter <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting SendPulse Email Marketing Newsletter <= 2.1.5	`CVE-2025-22662`	6.4 Medium	Webula	Yes
2025-01-24 00:00	Email Subscription Popup <= 1.2.23 - Authenticated (Administrator+) SQL Injection Email Subscription Popup <= 1.2.23	`CVE-2025-24587`	4.9 Medium	Webula	Yes

Showing 1–10 of 16 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C