What’s Vulnerable › Products

wphocus My auctions allegro vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.

Check whether your wphocus My auctions allegro version is affected

Latest wphocus My auctions allegro vulnerabilities

• CVE-2026-116855 — WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability (CVSS 5.4)
• CVE-2026-22491 — WordPress My auctions allegro plugin <= 3.6.35 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-22464 — WordPress My auctions allegro plugin <= 3.6.33 - Local File Inclusion vulnerability (CVSS 7.5)
• CVE-2025-67943 — WordPress My auctions allegro plugin <= 3.6.32 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-68567 — WordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4)
• CVE-2025-68566 — WordPress My auctions allegro plugin <= 3.6.35 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
• CVE-2025-12851 — My auctions allegro <= 3.6.32 - Unauthenticated Local File Inclusion via controller (CVSS 8.1)
• CVE-2025-12850 — My auctions allegro <= 3.6.32 - Unauthenticated SQL Injection via auction_id (CVSS 7.5)
• CVE-2025-10048 — My Auctions Allegro Plugin <= 3.6.31 - Authenticated (Admin+) SQL Injection (CVSS 4.9)
• CVE-2025-27009 — WordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 7.1)
• CVE-2025-31542 — WordPress My auctions allegro plugin <= 3.6.20 - SQL Injection vulnerability (CVSS 8.5)
• CVE-2025-22733 — WordPress My auctions allegro Plugin <= 3.6.18 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2024-11707 — My auctions allegro <= 3.6.17 - Reflected Cross-Site Scripting (CVSS 6.1)