Log in Start free

Jeff Starr

Products

ProductCVEsExploitedLatest
Simple Ajax Chat (WordPress plugin)3–Apr 15, 2022
User Submitted Posts3–Sep 30, 2026
Prismatic2–Jul 12, 2021
Dashboard Widgets Suite2–Dec 14, 2023
Simple Blog Stats1–May 7, 2025
Simple Download Counter1–Apr 22, 2025
Simple Statistics for Feeds1–Aug 22, 2025
Theme Switcha1–Apr 22, 2025
BBQ Pro1–Aug 19, 2026
User Submitted Posts – Enable Users to Submit Posts from the Front End1–Dec 20, 2023
Contact Form X (WordPress plugin)1–Mar 11, 2022
Head Meta Data1–Nov 21, 2025
Simple Ajax Chat1–Feb 23, 2026

Exploited and recent CVEs

  • CVE-2026-62084 Medium 6.5 WordPress User Submitted Posts plugin <= 20260810 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-73182 High 7.1 WordPress BBQ Pro plugin <= 3.9 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-3075 Medium 5.3 WordPress Simple Ajax Chat plugin <= 20251121 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2025-68509 Medium 4.7 WordPress User Submitted Posts plugin <= 20251121 - Open Redirection vulnerability 0.5%
  • CVE-2025-66081 Medium 5.9 WordPress Head Meta Data plugin <= 20250327 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-57892 Medium 4.3 WordPress Simple Statistics for Feeds Plugin <= 20250322 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
  • CVE-2025-47499 Medium 6.5 WordPress Simple Blog Stats plugin <= 20250416 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-46240 Medium 6.5 WordPress Simple Download Counter plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-46239 Medium 6.5 WordPress Theme Switcha plugin <= 3.4 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2023-7251 Medium 6.5 WordPress User Submitted Posts plugin <= 20230901 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-45603 Critical 9.0 WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload 1.0%
  • CVE-2023-49743 Medium 5.9 WordPress Dashboard Widgets Suite Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-26517 Medium 5.9 WordPress Dashboard Widgets Suite Plugin <= 3.2.1 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2022-27850 Medium 5.4 WordPress Simple Ajax Chat plugin <= 20220115 - Multiple Cross-Site Request Forgery (CSRF) vulnerability 0.4%
  • CVE-2022-27849 Medium 5.3 WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerability 4.6%
  • CVE-2022-25610 Low 3.4 WordPress Simple Ajax Chat plugin <= 20220115 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability 0.7%
  • CVE-2022-25601 Medium 4.7 WordPress Contact Form X plugin <= 2.4 - Reflected Cross-Site Scripting (XSS) vulnerability 1.0%
  • CVE-2021-24409 Unrated Prismatic < 2.8 - Reflected Cross-Site Scripting (XSS) 1.7%
  • CVE-2021-24408 Unrated Prismatic < 2.8 - Contributor+ Stored XSS 0.6%