Log in Start free

ERA404

Products

ProductCVEsExploitedLatest
StaffList4–Nov 27, 2025
CropRefine1–Oct 22, 2025
ImageMeta1–Feb 17, 2025
LinkedInclude1–Sep 22, 2025

Exploited and recent CVEs

  • CVE-2025-12185 Medium 4.4 StaffList <= 3.2.6 - Authenticated (Admin+) Stored Cross-Site Scripting 0.2%
  • CVE-2025-52734 High 7.1 WordPress CropRefine Plugin <= 1.2.1 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-57918 High 7.1 WordPress LinkedInclude Plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
  • CVE-2025-32255 Medium 5.3 WordPress StaffList plugin <= 3.2.7 - Sensitive Data Exposure vulnerability 0.6%
  • CVE-2025-32232 Medium 4.3 WordPress StaffList plugin <= 3.2.7 - Broken Access Control vulnerability 0.4%
  • CVE-2025-23845 High 7.1 WordPress ImageMeta Plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-13749 Medium 6.1 StaffList <= 3.2.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting 0.3%