CVE-2023-0448

The CVE-2023-0448 entry concerns the WordPress WP Helper Lite plugin, affected versions prior to 4.3. The issue arises because the plugin returns all GET parameters unsanitized in responses, enabling a reflected cross-site scripting (XSS) vulnerability. Practical impact described across sources i...

CVE-2023-46614

CVE-2023-46614 affects the WordPress WP Helper Premium plugin (

CVE-2024-9065

CVE-2024-9065 affects the WP Helper Premium plugin for WordPress. The issue is a missing capability check in the whp_smtp_send_mail_test function, present in all versions up to and including 4.6.1, allowing unauthenticated attackers to cause data modifications and to send emails from the vulnerab...