Jonathan Lau
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| CubePM | 1 | – | Jan 27, 2025 |
| CubePoints | 1 | – | Jun 6, 2025 |
Exploited and recent CVEs
- CVE-2025-28952 WordPress CubePoints plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
- CVE-2025-23574 WordPress CubePM plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%