Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

westerndeal — Vulnerabilities & Security Advisories 11

Browse all 11 CVE security advisories affecting westerndeal. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Westerndeal operates as a software provider with a core focus on enterprise resource planning solutions. Historically, their products have been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, accounting for 11 recorded CVEs. The company's security posture has been characterized by inconsistent patch management and delayed vulnerability remediation. While no major public security incidents have been documented, the accumulation of CVEs suggests potential systemic weaknesses in their development lifecycle. Organizations utilizing Westerndeal's software should prioritize regular updates and implement additional security controls to mitigate risks associated with these recurring vulnerability patterns.

CVE IDTitleCVSSSeverityPublished
CVE-2025-67979 WordPress WPForms Google Sheet Connector plugin <= 4.0.1 - Remote Code Execution (RCE) vulnerability — WPForms Google Sheet ConnectorCWE-94 9.9 Critical2026-02-20
CVE-2025-67570 WordPress WPForms Google Sheet Connector plugin <= 4.0.0 - Broken Access Control vulnerability — WPForms Google Sheet ConnectorCWE-862 5.3 Medium2025-12-09
CVE-2025-13136 GSheetConnector For Ninja Forms <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) System Information Exposure — GSheetConnector For Ninja FormsCWE-862 4.3 Medium2025-11-22
CVE-2025-8606 GSheetConnector For Gravity Forms <= 1.3.23 - Cross-Site Request Forgery to Arbitrary Plugin Activation/Deactivation — GSheetConnector for Gravity Forms – Send Gravity Forms Entries to Google Sheets in Real-TimeCWE-352 2.4 Low2025-10-11
CVE-2025-8593 GSheetConnector For Gravity Forms <= 1.3.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation — GSheetConnector for Gravity Forms – Send Gravity Forms Entries to Google Sheets in Real-TimeCWE-862 8.8 High2025-10-11
CVE-2025-54030 WordPress WooCommerce Google Sheet Connector plugin <= 1.3.20 - Cross Site Request Forgery (CSRF) Vulnerability — WooCommerce Google Sheet ConnectorCWE-352 4.3 Medium2025-07-16
CVE-2025-30592 WordPress Advanced Dewplayer - plugin <= 1.6 Broken Access Control Vulnerability — Advanced DewplayerCWE-862 5.3 Medium2025-03-24
CVE-2025-22686 WordPress CF7 Google Sheets Connector plugin <= 5.0.17 - Broken Access Control vulnerability — CF7 Google Sheets ConnectorCWE-862 5.3 Medium2025-02-03
CVE-2025-22752 WordPress GSheetConnector for Forminator Forms Plugin <= 1.0.12 - Reflected Cross Site Scripting (XSS) vulnerability — GSheetConnector for Forminator FormsCWE-79 7.1 High2025-01-15
CVE-2024-5654 CF7 Google Sheets Connector <= 5.0.9 - Missing Authorization to Limited Site Configuration Update — GSheetConnector for CF7 – Connect Contact Form 7 to Google Sheets and Send Form Submissions in Real TimeCWE-862 6.5 Medium2024-06-08
CVE-2024-1562 WooCommerce Google Sheet Connector <= 1.3.11 - Missing Authorization — GSheetConnector for WooCommerce – Send your Orders and Products to Google Sheet in Real-TimeCWE-862 5.3 Medium2024-02-21

This page lists every published CVE security advisory associated with westerndeal. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.