Eli
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| EZ SQL Reports Shortcode Widget and DB Backup | 3 | – | Mar 27, 2025 |
| Anti-Malware Security and Brute-Force Firewall | 1 | – | Jul 13, 2026 |
| Eli's WordCents adSense Widget with Analytics | 1 | – | Jun 15, 2026 |
| ELI's Related Posts Footer Links and Widget | 1 | – | May 7, 2025 |
Exploited and recent CVEs
- CVE-2026-57691 WordPress Anti-Malware Security and Brute-Force Firewall plugin <= 4.23.89 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-68872 WordPress Eli's WordCents adSense Widget with Analytics plugin <= 1.3.03.27 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-47514 WordPress ELI's Related Posts Footer Links and Widget plugin <= 1.2.04.20 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability 0.1%
- CVE-2025-30788 WordPress EZ SQL Reports Shortcode Widget and DB Backup plugin <= 5.25.08 - CSRF to SQL Injection vulnerability 0.2%
- CVE-2025-30787 WordPress EZ SQL Reports Shortcode Widget and DB Backup plugin <= 5.25.08 - CSRF to Stored XSS vulnerability 0.2%
- CVE-2025-26887 WordPress EZ SQL Reports Shortcode Widget and DB Backup plugin <= 5.21.35 - Cross Site Scripting (XSS) vulnerability 0.3%