Skip to content
AAlobaidi
Exploited and recent CVEs
-
CVE-2026-25310
Medium 4.9
WordPress Extend Link plugin <= 2.0.0 - Server Side Request Forgery (SSRF) vulnerability
0.2%
-
CVE-2025-13908
Medium 6.4
The Tooltip <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
0.3%
-
CVE-2025-9616
Medium 5.3
PopAd <= 1.0.4 - Cross-Site Request Forgery to Settings Update
0.2%
-
CVE-2025-8080
Medium 4.4
Alobaidi Captcha <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings
0.3%
-
CVE-2025-27280
Medium 6.5
WordPress Archive Page plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability
0.3%
-
CVE-2023-4962
Medium 6.4
Video PopUp <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
0.4%