Skip to content
DDavid Cramer
Exploited and recent CVEs
-
CVE-2025-23553
High 7.1
WordPress Userbase Access Control plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
0.4%
-
CVE-2023-46632
High 7.1
WordPress My Shortcodes plugin <= 2.3 - Broken Access Control vulnerability
0.5%
-
CVE-2024-49677
High 7.1
WordPress Bootstrap Buttons plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability
0.3%
-
CVE-2024-56003
Medium 4.3
WordPress Caldera SMTP Mailer plugin <= 1.0.1 - Broken Access Control vulnerability
0.4%