Max Chirkov

Products

ProductCVEsExploitedLatest
Advanced Text Widget2–Dec 9, 2024
FlexIDX Home Search1–Feb 7, 2025
Simple Login Log1–Aug 20, 2025

Exploited and recent CVEs

  • CVE-2025-49438 High 8.1 WordPress Simple Login Log plugin <= 1.1.3 - PHP Object Injection vulnerability 0.4%
  • CVE-2025-25082 Medium 6.5 WordPress flexIDX Home Search plugin <= 2.1.2 - Stored Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-26520 Medium 5.3 WordPress Advanced Text Widget plugin <= 2.1.2 - Broken Access Control vulnerability 0.4%
  • CVE-2023-26539 Medium 5.9 WordPress Advanced Text Widget Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS) 0.4%