Jeroen Peters
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Name Directory | 5 | – | Oct 5, 2026 |
| All-in-one Like Widget | 1 | – | Apr 24, 2024 |
| Navigation menu as Dropdown Widget | 1 | – | Apr 18, 2024 |
Exploited and recent CVEs
- CVE-2026-104396 WordPress Name Directory plugin <= 1.34.2 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-104397 WordPress Name Directory plugin <= 1.34.2 - Arbitrary Shortcode Execution vulnerability 0.2%
- CVE-2025-39454 WordPress Name Directory plugin <= 1.30.0 - Broken Access Control vulnerability 0.2%
- CVE-2024-43938 WordPress Name Directory plugin <= 1.29.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-32815 WordPress All-in-one Like Widget plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-32126 WordPress Navigation menu as dropdown Widget plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2023-22692 WordPress Name Directory Plugin <= 1.27.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%