Apasionados

Products

ProductCVEsExploitedLatest
DoFollow Case by Case4–Oct 2, 2026
Export Post Info (WordPress plugin)2–Sep 23, 2022
Comment Blacklist Updater1–Dec 13, 2024
Email Notification on Login1–May 7, 2025
Submission DOM tracking for Contact Form 71–May 7, 2025

Exploited and recent CVEs

  • CVE-2026-95817 High 7.2 DoFollow Case by Case <= 3.6.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content 0.2%
  • CVE-2025-62102 Medium 4.3 WordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-47626 Medium 5.9 WordPress Submission DOM tracking for Contact Form 7 plugin <= 2.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-47625 Medium 5.9 WordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-47624 Medium 4.3 WordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2025-47622 Medium 5.9 WordPress Email Notification on Login plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-44147 Medium 5.3 WordPress Comment Blacklist Updater plugin <= 1.1.0 - Broken Access Control vulnerability 0.5%
  • CVE-2022-38061 Medium 6.2 WordPress Export Post Info plugin <= 1.2.0 - Authenticated CSV Injection vulnerability 0.8%
  • CVE-2022-38068 Medium 4.8 WordPress Export Post Info plugin <= 1.1.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 0.6%