Log in Start free

DuoGeek

Products

ProductCVEsExploitedLatest
Custom Dashboard Widget2–Jan 2, 2025
Custom Admin Menu1–Nov 9, 2024
Easy Custom Admin Bar1–Mar 22, 2025
Email to Download1–Feb 14, 2025
EventPress1–Nov 19, 2024
Simple Amazon Affiliate1–Mar 12, 2025

Exploited and recent CVEs

  • CVE-2025-2479 Medium 6.1 Easy Custom Admin Bar <= 1.0 - Reflected Cross-Site Scripting via msg Parameter 0.3%
  • CVE-2025-2077 Medium 6.1 Simple Amazon Affiliate <= 1.0.9 - Reflected Cross-Site Scripting 0.3%
  • CVE-2025-23786 High 7.1 WordPress Email to Download Plugin <= 3.1.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-56024 High 7.1 WordPress Custom Dashboard Widget plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-51860 Medium 6.5 WordPress Custom Dashboard Widget plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-51861 Medium 6.5 WordPress EventPress plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-51618 Medium 6.5 WordPress Custom Admin Menu plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability 0.3%