5.3
Medium
CVE-2025-49906 Missing Authorization vulnerability in StellarWP WPComplete wpcomplete allows Accessing Functionality Not Properly…
Description
Missing Authorization vulnerability in StellarWP WPComplete wpcomplete allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPComplete: from n/a through <= 2.9.5.3.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WPComplete 2.9 | earliest → 2.9.5.3 | No fix stated |
Other CVEs of WPComplete
The 4 CVEs of WPComplete →
CVE-2026-77820
The WPComplete plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'empty' Shortcode Attribute in…
6.4
Medium
CVE-2025-58974
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP…
6.5
Medium
CVE-2025-50046
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP…
6.5
Medium