MantraBrain
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Easy Invoice | 1 | – | Jun 15, 2026 |
| Learning Management System, eLearning, Course Builder, WordPress LMS Plugin – Sikshya LMS | 1 | – | Dec 17, 2024 |
| Sikshya LMS | 1 | – | Feb 3, 2025 |
| Ultimate Watermark | 1 | – | Sep 22, 2025 |
| Yatra | 1 | – | May 10, 2023 |
Exploited and recent CVEs
- CVE-2026-48836 WordPress Easy Invoice plugin <= 2.1.19 - Remote Code Execution (RCE) vulnerability 0.6%
- CVE-2025-57985 WordPress Ultimate Watermark Plugin <= 1.1 - Broken Access Control Vulnerability 0.3%
- CVE-2025-24630 WordPress Sikshya LMS Plugin <= 0.0.21 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-12127 Learning Management System, eLearning, Course Builder, WordPress LMS Plugin – Sikshya LMS <= 0.0.21 - Reflected Cross-Site Scripting via page Parameter 0.4%
- CVE-2022-47436 WordPress Yatra Plugin <= 2.1.14 is vulnerable to Cross Site Scripting (XSS) 0.4%