David Cramer

Products

ProductCVEsExploitedLatest
Bootstrap Buttons1–Dec 18, 2024
Caldera SMTP Mailer1–Dec 16, 2024
My Shortcodes1–Jan 2, 2025
Userbase Access Control1–Mar 3, 2025

Exploited and recent CVEs

  • CVE-2025-23553 High 7.1 WordPress Userbase Access Control plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-46632 High 7.1 WordPress My Shortcodes plugin <= 2.3 - Broken Access Control vulnerability 0.5%
  • CVE-2024-49677 High 7.1 WordPress Bootstrap Buttons plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-56003 Medium 4.3 WordPress Caldera SMTP Mailer plugin <= 1.0.1 - Broken Access Control vulnerability 0.4%