Lester Chan

Products

ProductCVEsExploitedLatest
WP-DownloadManager1–Oct 6, 2024
WP-Polls1–Jul 23, 2026
WP-ShowHide1–Dec 9, 2025
WP-Stats1–Aug 13, 2026

Exploited and recent CVEs

  • CVE-2026-66426 High 7.1 WordPress WP-Stats plugin <= 2.56 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-68081 Medium 5.9 WordPress WP-Polls plugin <= 2.77.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-67541 Medium 6.5 WordPress WP-ShowHide plugin <= 1.05 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-47341 High 7.1 WordPress WP-DownloadManager plugin <= 1.68.8 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%