Plugin icon

Ultimate WordPress Auction Plugin

ultimate-auction

Vulnerabilities:

7

Last Updated:

September 15, 2025

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2025-12-12
Title
Ultimate Auction <= 4.3.2 - Missing Authorization
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2025-12-12
Title
Ultimate Auction <= 4.3.2 - Unauthenticated Information Exposure
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2025-03-03
Title
Ultimate WordPress Auction Plugin < 4.3.0 - Contributor+ Arbitrary Post Deletion
Fixed in
Fixed in 4.3.0
CVSS
4.9 (medium)
Published
2024-07-26
Title
Ultimate WordPress Auction Plugin < 4.2.8 - Missing Authorization to Unauthenticated Email Creation
Fixed in
Fixed in 4.2.8
CVSS
5.8 (medium)
Published
2024-07-06
Title
Ultimate Auction < 4.2.6 - Cross-Site Request Forgery
Fixed in
Fixed in 4.2.6
CVSS
4.3 (medium)
Published
2019-12-18
Title
Ultimate Auction < 4.0.6 - Multiple CSRF & XSS
Fixed in
Fixed in 4.0.6
CVSS
n/a
Published
2014-08-01
Title
Ultimate Auction 1.0 - Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 1.0.1
CVSS
n/a