Log in Start free

CodeSolz

Products

ProductCVEsExploitedLatest
Better Find and Replace3–Sep 22, 2025
Better Find and Replace – AI-Powered Suggestions3–Apr 16, 2026
Ultimate Push Notifications3–Jul 16, 2025
Bitcoin / AltCoin Payment Gateway for WooCommerce2–Mar 26, 2025
Easy Ad Manager1–May 12, 2023

Exploited and recent CVEs

  • CVE-2026-3369 Medium 5.4 Better Find and Replace – AI-Powered Suggestions <= 1.7.9 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Title 0.3%
  • CVE-2025-9334 High 8.8 Better Find and Replace <= 1.7.7 - Authenticated (Subscriber+) Limited Code Injection 0.5%
  • CVE-2025-12360 Medium 4.3 Better Find and Replace <= 1.7.7 - Missing Authorization 0.2%
  • CVE-2025-53466 Medium 5.9 WordPress Better Find and Replace Plugin <= 1.7.6 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-50028 Medium 6.5 WordPress Ultimate Push Notifications plugin <= 1.2.0 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-31561 High 8.5 WordPress Ultimate Push Notifications plugin <= 1.2.0 - SQL Injection vulnerability 0.5%
  • CVE-2025-31548 High 7.1 WordPress Ultimate Push Notifications plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-26541 High 7.1 WordPress Bitcoin / AltCoin Payment Gateway for WooCommerce plugin <= 1.7.6 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2025-26535 Critical 9.3 WordPress Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop plugin <= 1.7.6 - SQL Injection vulnerability 0.5%
  • CVE-2025-24734 High 8.8 WordPress Better Find and Replace plugin <= 1.6.7 - Privilege Escalation vulnerability 0.5%
  • CVE-2024-39636 High 8.3 WordPress Better Find and Replace plugin <= 1.6.1 - PHP Object Injection vulnerability 0.4%
  • CVE-2023-25460 Medium 5.9 WordPress Easy Ad Manager Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS) 0.4%