Log in Start free

Fahad Mahmood

Products

ProductCVEsExploitedLatest
WP Docs8–Sep 10, 2026
Keep Backup Daily3–Aug 31, 2026
WP Sort Order2–Aug 18, 2026
Endless Posts Navigation2–Feb 19, 2026
RSS Feed Widget2–Jan 6, 2026
Stock Locations for WooCommerce2–Jul 13, 2026
WP Datepicker2–Nov 1, 2024
Easy Upload Files During Checkout1–Dec 31, 2025
Order Splitter for WooCommerce1–Apr 1, 2025
Chameleon (WordPress plugin)1–Nov 17, 2022
WP Quick Shop1–Dec 13, 2024
Alphabetic Pagination1–Feb 25, 2025
External Store for Shopify1–Jun 6, 2025
Gulri Slider1–Dec 31, 2024
Injection Guard1–Dec 13, 2024

Exploited and recent CVEs

  • CVE-2026-81782 Medium 6.5 WordPress WP Docs plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-75133 High 7.5 Keep Backup Daily WordPress Plugin < 2.1.4 Sensitive Information Exposure via kbd_cron_process 0.5%
  • CVE-2026-28567 High 7.5 WordPress WP Sort Order plugin <= 1.3.5 - Broken Access Control vulnerability 0.4%
  • CVE-2026-57419 Medium 6.5 WordPress Stock Locations for WooCommerce plugin <= 3.1.8 - Broken Access Control vulnerability 0.3%
  • CVE-2026-25332 Medium 5.3 WordPress Endless Posts Navigation plugin <= 2.2.9 - Broken Access Control vulnerability 0.3%
  • CVE-2026-24990 Medium 5.4 WordPress WP Docs plugin <= 2.2.8 - Broken Access Control vulnerability 0.2%
  • CVE-2025-69349 Medium 5.4 WordPress RSS Feed Widget plugin <= 3.0.2 - Broken Access Control vulnerability 0.2%
  • CVE-2025-62078 Medium 4.3 WordPress Easy Upload Files During Checkout plugin <= 3.0.0 - Broken Access Control vulnerability 0.2%
  • CVE-2025-47463 High 7.1 WordPress Stock Locations for WooCommerce plugin <= 2.8.6 - Broken Access Control Vulnerability 0.4%
  • CVE-2025-30999 High 7.5 WordPress External Store for Shopify plugin <= 1.5.9 - Local File Inclusion vulnerability 0.8%
  • CVE-2025-31089 High 8.5 WordPress Order Splitter for WooCommerce plugin <= 5.3.0 - SQL Injection Vulnerability 0.5%
  • CVE-2025-31417 Medium 4.3 WordPress WP Docs plugin < 2.2.7 - Broken Access Control vulnerability 0.2%
  • CVE-2025-26751 High 7.1 WordPress Alphabetic Pagination Plugin <= 3.2.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-26779 Medium 4.9 WordPress Keep Backup Daily plugin <= 2.1.0 - Arbitrary File Download vulnerability 0.5%
  • CVE-2024-56288 Medium 5.9 WordPress WP Docs plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-56223 High 7.1 WordPress Gulri Slider plugin <= 3.5.8 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-54344 High 7.1 WordPress WP Quick Shop plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-32574 Medium 4.3 WordPress Injection Guard plugin <= 1.2.1 - Broken Access Control vulnerability 0.4%
  • CVE-2023-30873 Medium 5.4 WordPress WP Docs plugin <= 1.9.8 - Broken Access Control 0.5%
  • CVE-2024-47321 Medium 6.5 WordPress WP Datepicker plugin <= 2.1.1 - Broken Access Control vulnerability 0.4%
  • CVE-2024-49629 High 7.1 WordPress Endless Posts Navigation plugin <= 2.2.7 - CSRF to Stored XSS vulnerability 0.2%
  • CVE-2024-48024 High 7.5 WordPress Keep Backup Daily plugin <= 2.1.3 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2024-44042 Medium 5.9 WordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-31294 Medium 4.3 WordPress WP Sort Order plugin <= 1.3.1 - Broken Access Control vulnerability 0.3%
  • CVE-2024-35695 Medium 6.5 WordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-35696 High 7.1 WordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-32690 Medium 5.9 WordPress RSS Feed Widget plugin <= 2.9.7 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-32106 High 7.1 WordPress WP Docs Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2022-44736 Medium 4.8 WordPress Chameleon plugin <= 1.4.3 - Auth. Stored Cross-Site Scripting (XSS) vulnerability 0.4%