HuangYe WuDeng
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Hacklog DownloadManager | 1 | – | Nov 19, 2024 |
| Hacklog Remote Attachment | 1 | – | Apr 24, 2025 |
| Hacklog Remote Image Autosave | 1 | – | Mar 24, 2025 |
Exploited and recent CVEs
- CVE-2025-46530 WordPress Hacklog Remote Attachment plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
- CVE-2025-30576 WordPress Hacklog Remote Image Autosave plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
- CVE-2024-52401 WordPress Hacklog DownloadManager plugin <=2.1.4 - CSRF to Arbitrary File Upload vulnerability 0.3%