Demonisblack
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| demon image annotation | 3 | – | Nov 3, 2023 |
| Scoreboard for HTML5 Games Lite | 1 | – | Mar 20, 2026 |
Exploited and recent CVEs
- CVE-2026-4083 Scoreboard for HTML5 Games Lite <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.2%
- CVE-2023-40215 WordPress Demon image annotation Plugin <= 5.1 is vulnerable to SQL Injection 0.7%
- CVE-2022-4171 demon image annotation <= 5.0 - Improper Input Restriction Validation 0.7%
- CVE-2022-2864 The demon image annotation plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.7. This is due to missing nonce validation in the ~/includes/settings.ph 0.6%