David Wood

Products

ProductCVEsExploitedLatest
Latest Custom Post Type Updates1–Apr 3, 2025
TM Replace Howdy1–Jun 20, 2025

Exploited and recent CVEs

  • CVE-2025-49972 Medium 4.3 WordPress TM Replace Howdy plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
  • CVE-2025-30616 High 7.1 WordPress Latest Custom Post Type Updates plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%