Marcel Pol
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Elo Rating Shortcode | 1 | – | Nov 4, 2024 |
| Gwolle Guestbook | 1 | – | Jan 31, 2025 |
| Zeno Font Resizer | 1 | – | Apr 7, 2023 |
Exploited and recent CVEs
- CVE-2025-24710 WordPress Gwolle Guestbook plugin <= 4.7.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-51678 WordPress Elo Rating Shortcode plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2023-25442 WordPress Zeno Font Resizer Plugin <= 1.7.9 is vulnerable to Cross Site Scripting (XSS) 0.4%