Log in Start free

Lavacode

Products

ProductCVEsExploitedLatest
Lava Directory Manager2–Nov 14, 2023
Lava Ajax Search1–Mar 11, 2025

Exploited and recent CVEs

  • CVE-2025-28937 Medium 5.9 WordPress Lava Ajax Search plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-47659 Medium 6.5 WordPress Lava Directory Manager Plugin <= 1.1.34 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-46081 High 7.1 WordPress Lava Directory Manager Plugin <= 1.1.34 is vulnerable to Cross Site Scripting (XSS) 0.4%