Mamunur Rashid
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Classified Listing | 7 | – | Oct 19, 2026 |
| ShopBuilder – Elementor WooCommerce Builder Addons | 2 | – | Oct 29, 2026 |
| The Post Grid | 2 | – | Oct 29, 2026 |
| Radius Booking — Booking Calendar for Appointments & Services | 1 | – | Nov 7, 2026 |
| Review Schema | 1 | – | Oct 1, 2026 |
Exploited and recent CVEs
- CVE-2026-119508 WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - Broken Access Control vulnerability –
- CVE-2026-54871 WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.4.2 - Broken Access Control vulnerability 0.3%
- CVE-2026-56056 WordPress The Post Grid plugin <= 7.9.7 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-111828 WordPress Classified Listing plugin <= 6.1.5 - Direct static code injection vulnerability 0.2%
- CVE-2026-94665 WordPress Classified Listing plugin <= 6.1.2 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-95596 WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.4.1 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-97280 WordPress Review Schema plugin 3.1.0 - Broken Access Control vulnerability 0.2%
- CVE-2026-84217 WordPress Classified Listing plugin <= 6.1.3 - Broken Access Control vulnerability 0.3%
- CVE-2026-42658 WordPress Classified Listing plugin <= 5.3.8 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-42651 WordPress Classified Listing plugin <= 5.3.9 - Broken Access Control vulnerability 0.2%
- CVE-2026-42640 WordPress Classified Listing plugin <= 5.3.8 - Broken Access Control vulnerability 0.2%
- CVE-2026-42679 WordPress Classified Listing plugin <= 5.3.8 - Arbitrary File Download vulnerability 0.3%
- CVE-2026-49054 WordPress The Post Grid plugin <= 7.9.2 - Broken Access Control vulnerability 0.2%