Vulnerabilities / WPComplete
WPComplete vulnerabilities
Advisories WPSec published for WPComplete. Other sources may list more. Its attack surface: WPComplete on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-08 | WPSEC-2026-0610 | WPComplete <= 2.9.5.7 - Authenticated (Contributor+) Missing Authorization to Arbitrary Post Completion Data Modification | Medium 4.3 | 2.9.5.8 |
| 2026-10-08 | WPSEC-2026-0609 | WPComplete <= 2.9.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Course Name | Medium 6.4 | 2.9.5.8 |
License: CC BY 4.0