JS Morisset
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| JSM file_get_contents() Shortcode | 1 | – | Sep 22, 2025 |
| JSM Show Post Metadata | 1 | – | Jan 24, 2025 |
| WPSSO Core | 1 | – | Jan 2, 2025 |
Exploited and recent CVEs
- CVE-2025-58653 WordPress JSM file_get_contents() Shortcode Plugin <= 2.7.1 - Cross Site Scripting (XSS) Vulnerability 0.2%
- CVE-2025-24589 WordPress JSM Show Post Metadata plugin <= 4.6.0 - Broken Access Control vulnerability 0.4%
- CVE-2024-56243 WordPress WPSSO Core plugin <= 18.18.1 - Broken Access Control vulnerability 0.3%