CRUDLab

Products

Product	CVEs	Exploited	Latest
Jazz Popups	2	–	Nov 7, 2023
WP Like Button	2	–	Dec 9, 2024
CRUDLab Google Plus Button	1	–	Dec 16, 2024
CRUDLab Like Box	1	–	Mar 3, 2025
CRUDLab Scroll to Top	1	–	Apr 17, 2025
Image Gallery Box by CRUDLab	1	–	Jan 22, 2025

CVE-2025-22774 High 7.1 WordPress CRUDLab Scroll to Top Plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2025-23814 High 7.1 WordPress CRUDLab Like Box Plugin <= 2.0.9 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
CVE-2025-23938 High 7.5 WordPress Image Gallery Box by CRUDLab Plugin <= 1.0.3 - Local File Inclusion vulnerability 0.9%
CVE-2024-54399 High 7.1 WordPress CRUDLab Google Plus Button plugin <= 1.0.2 - CSRF to Stored XSS vulnerability 0.2%
CVE-2023-47820 Medium 4.3 WordPress WP Like Button plugin <= 1.7.0 - Broken Access Control vulnerability 0.3%
CVE-2023-32966 Medium 5.4 WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Request Forgery (CSRF) leading to Stored XSS 0.2%
CVE-2023-40199 Medium 5.4 WordPress WP Like Button Plugin <= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
CVE-2023-32965 High 7.1 WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Scripting (XSS) 0.4%