Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

WPComplete — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in WPComplete, with AI-generated Chinese analysis, references, and POCs.

Vendor: iThemes

CVE ID Title CVSS Severity Published
CVE-2026-77820 WPComplete <= 2.9.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'empty' Shortcode Attribute CWE-79 6.4 Medium 2026-09-19
CVE-2026-66599 WordPress WPComplete plugin <= 2.9.5.6 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-08-24
CVE-2026-57661 WordPress WPComplete plugin <= 2.9.5.5 - Broken Access Control vulnerability CWE-862 5.4 Medium 2026-06-26
CVE-2026-42750 WordPress WPComplete plugin <= 2.9.5.4 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2026-05-27
CVE-2025-49906 WordPress WPComplete plugin <= 2.9.5.3 - Broken Access Control vulnerability CWE-862 5.3 Medium 2025-10-22
CVE-2025-58974 WordPress WPComplete Plugin <= 2.9.5.2 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium 2025-09-22
CVE-2025-50046 WordPress WPComplete plugin <= 2.9.5 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium 2025-06-20
CVE-2022-45825 WordPress WPComplete Plugin <= 2.9.4 is vulnerable to Cross Site Scripting (XSS) CWE-79 7.1 High 2023-03-28

All 8 known CVE vulnerabilities affecting WPComplete with full Chinese analysis, references, and POCs where available.