Alex

Products

Product	CVEs	Exploited	Latest
Content Mask	2	–	Sep 22, 2025
Featured Video Plus	2	–	Aug 18, 2026
Include Fussball.de Widgets	1	–	Oct 5, 2024

CVE-2026-66637 Medium 6.5 WordPress Featured Video Plus plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2026-66685 Medium 5.3 WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability 0.3%
CVE-2025-58011 Medium 6.4 WordPress Content Mask plugin <= 1.8.5.2 - Server Side Request Forgery (SSRF) vulnerability 0.2%
CVE-2025-58012 Low 3.8 WordPress Content Mask plugin <= 1.8.5.3 - Insecure Direct Object References (IDOR) vulnerability 0.3%
CVE-2024-47643 Medium 6.5 WordPress Include Fussball.de Widgets plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability 0.3%