CodeVibrant
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Maintenance Notice | 1 | – | Mar 11, 2025 |
| WP Blog Post Layouts | 1 | – | Jun 21, 2024 |
| WP Magazine Modules Lite | 1 | – | Jun 19, 2024 |
Exploited and recent CVEs
- CVE-2025-28859 WordPress Maintenance Notice plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2024-5503 WP Blog Post Layouts <= 1.1.3 - Authenticated (Contributor+) Local File Inlcusion 0.8%
- CVE-2024-5574 WP Magazine Modules Lite <= 1.1.2 - Authenticated (Contributor+) Local File Inclusion 0.8%