Advisories · Technology

Ludwig You WPMasterToolKit.

Every CVE that names Ludwig You WPMasterToolKit among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-66624 CVE record

CVSS 7.6 High

WordPress WPMasterToolKit plugin <= 2.22.0 - SQL Injection vulnerability
- Ludwig You WPMasterToolKit
- SQL injection
Not analysed yet 17 Sept 2026
CVE-2026-24388 CVE record

CVSS 4.3 Medium

WordPress WPMasterToolKit plugin <= 2.14.0 - Broken Access Control vulnerability
- Ludwig You WPMasterToolKit
- Broken access control
Not analysed yet 22 Jan 2026
CVE-2024-56249 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Upload vulnerability
- Ludwig You WPMasterToolKit
- Unrestricted file upload
Not analysed yet 2 Jan 2025
CVE-2024-56248 CVE record

CVSS 4.9 Medium

WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Download vulnerability
- Ludwig You WPMasterToolKit
- Path traversal
Not analysed yet 2 Jan 2025