Demonisblack

Products

ProductCVEsExploitedLatest
demon image annotation3–Nov 3, 2023
Scoreboard for HTML5 Games Lite1–Mar 20, 2026

Exploited and recent CVEs

  • CVE-2026-4083 Medium 6.4 Scoreboard for HTML5 Games Lite <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.2%
  • CVE-2023-40215 High 7.6 WordPress Demon image annotation Plugin <= 5.1 is vulnerable to SQL Injection 0.7%
  • CVE-2022-4171 Medium 6.5 demon image annotation <= 5.0 - Improper Input Restriction Validation 0.7%
  • CVE-2022-2864 High 8.8 The demon image annotation plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.7. This is due to missing nonce validation in the ~/includes/settings.ph 0.6%