Log in Start free

Fullworks

Products

ProductCVEsExploitedLatest
Quick Paypal Payments5–Sep 5, 2025
Quick Event Manager4–Dec 9, 2024
Quick Contact Form3–Dec 9, 2024
Display Eventbrite Events2–Apr 8, 2026
Meet My Team (WordPress plugin)1–Sep 23, 2022
Quick PayPal Payments: Payment Button & Form1–Oct 16, 2026
Simple Shortcode for Google Maps1–Nov 8, 2024

Exploited and recent CVEs

  • CVE-2026-110017 Medium 6.4 Quick PayPal Payments: Payment Button & Form <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'form' Shortcode Attribute 0.2%
  • CVE-2026-39535 Medium 5.3 WordPress Display Eventbrite Events plugin <= 6.5.6 - Broken Access Control vulnerability 0.2%
  • CVE-2025-27003 Medium 4.3 WordPress Quick Paypal Payments Plugin <= 5.7.46 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-47510 High 7.5 WordPress Display Eventbrite Events plugin < 6.3 - Local File Inclusion Vulnerability 0.8%
  • CVE-2023-23975 Medium 5.3 WordPress Quick Event Manager plugin <= 9.7.4 - Broken Access Control vulnerability 0.7%
  • CVE-2023-25035 Medium 6.5 WordPress Quick Contact Form plugin <= 8.0.3.1 - Broken Access Control vulnerability 0.7%
  • CVE-2023-25714 High 7.5 WordPress Quick Paypal Payments plugin <= 5.7.25 - Broken Access Control vulnerability 0.8%
  • CVE-2024-10621 Medium 6.4 Simple Shortcode for Google Maps <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
  • CVE-2023-23889 Medium 6.5 WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2022-47608 Medium 5.9 WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-25713 High 7.1 WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-25702 Medium 5.9 WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-23885 Medium 6.5 WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-23979 High 7.1 WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2022-46863 Medium 5.9 WordPress Quick Event Manager Plugin <= 9.6.4 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-23974 Medium 5.4 WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
  • CVE-2022-37339 Medium 4.1 WordPress Meet My Team plugin <= 2.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 0.5%