Rashid vulnerabilities

Products

• Docpro 1
• Slider Path for Elementor 1
• WPSection 1

Latest Rashid CVEs

Newest publication first

1. CVE-2026-40777 WordPress WPSection plugin <= 1.5.1 - Broken Access Control vulnerability

   Published 2026-10-10

   High·CVSS 8.1 EPSS 0.35%

   Subscriber Broken Access Control in WPSection <= 1.5.1 versions.

2. CVE-2025-31529 WordPress Slider Path for Elementor plugin <= 3.0.0 - Broken Access Control vulnerability

   Published 2025-03-31

   Medium·CVSS 4.3 EPSS 0.29%

   Missing Authorization vulnerability in Rashid Slider Path for Elementor slider-path allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider Path for Elementor: from n/a through <= 3.0.0.

3. CVE-2025-28916 WordPress Docpro plugin <= 2.0.1 - Local File Inclusion vulnerability

   Published 2025-03-26

   Critical·CVSS 9.8 EPSS 0.90%

   Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Rashid Docpro docpro allows PHP Local File Inclusion.This issue affects Docpro: from n/a through <= 2.0.1.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.