Daman Jeet
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Real Time Validation for Gravity Forms | 3 | – | Nov 6, 2025 |
| Finale Lite | 2 | – | Oct 29, 2026 |
Exploited and recent CVEs
- CVE-2026-118074 WordPress Finale Lite plugin <= 2.21.0 - PHP Object Injection vulnerability 0.3%
- CVE-2025-48330 WordPress Real Time Validation for Gravity Forms <= 1.7.0 - Local File Inclusion Vulnerability 0.6%
- CVE-2025-52736 WordPress Finale Lite Plugin <= 2.20.0 - Cross Site Scripting (XSS) Vulnerability 0.2%
- CVE-2025-48329 WordPress Real Time Validation for Gravity Forms plugin <= 1.7.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-48328 WordPress Real Time Validation for Gravity Forms plugin <= 1.7.0 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability 0.1%