All products

wp-promoter

WordPress · Plugin
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
WP Promoter <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'popup_width' ParameterCVE-2026-8906 wp-promoter WordPress Medium No fix reported
WP Promoter <= 1.3 - Missing Authorization to Unauthenticated Statistics Reset via wpp-reset_stats AJAX ActionCVE-2026-9014 wp-promoter WordPress Medium No fix reported