Log in Start free

Noor Alam

Products

ProductCVEsExploitedLatest
Magical Addons For Elementor6–Mar 13, 2026
Checkout for PayPal2–Mar 13, 2026
Easy Media Download1–Jan 8, 2026
Gmail SMTP1–Jun 26, 2026
Magical Blocks1–Apr 1, 2025
Magical Posts Display1–Aug 14, 2025
Magical Posts Display – Elementor & Gutenberg Posts Blocks1–Jul 20, 2024
Sell Media File with Stripe1–Nov 19, 2024
SMTP Mailer1–Mar 25, 2026
WordPress Image SEO1–Oct 20, 2024
WP fancybox1–Jul 4, 2025
Colorbox Lightbox1–Aug 20, 2025

Exploited and recent CVEs

  • CVE-2026-57657 Medium 4.3 WordPress Gmail SMTP plugin <= 1.2.3.19 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2026-32538 High 7.5 WordPress SMTP Mailer plugin <= 1.1.24 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-32429 Medium 6.5 WordPress Magical Addons For Elementor plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-32387 Medium 5.3 WordPress Checkout for PayPal plugin <= 1.0.46 - Broken Access Control vulnerability 0.2%
  • CVE-2025-69169 Medium 5.4 WordPress Easy Media Download plugin <= 1.1.11 - CSS Injection vulnerability 0.3%
  • CVE-2025-49397 Medium 6.5 WordPress Colorbox Lightbox Plugin <= 1.1.5 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-54706 Medium 6.5 WordPress Magical Posts Display Plugin plugin <= 1.2.52 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-26591 Medium 6.5 WordPress WP fancybox plugin <= 1.0.3 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-39572 Medium 6.5 WordPress Checkout for PayPal plugin <= 1.0.38 - Cross Site Scripting (XSS) Vulnerability 0.4%
  • CVE-2025-31844 Medium 6.5 WordPress Magical Blocks plugin <= 1.0.12 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-54212 Medium 6.5 WordPress Magical Addons For Elementor plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-51892 Medium 6.5 WordPress Sell Media File with Stripe plugin <= 1.0.6 - Stored Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-51665 Medium 4.9 WordPress Magical Addons For Elementor plugin <= 1.2.1 - Server Side Request Forgery (SSRF) vulnerability 0.6%
  • CVE-2024-49627 Medium 4.3 WordPress WordPress Image SEO plugin <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-38730 Medium 4.9 WordPress Magical Addons For Elementor plugin <= 1.1.41 - Server Side Request Forgery (SSRF) vulnerability 0.2%
  • CVE-2024-37951 Medium 6.5 WordPress Magical Posts Display plugin <= 1.2.38 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-38681 Medium 6.5 WordPress Magical Addons For Elementor plugin <= 1.1.41 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-34547 Medium 6.5 WordPress Magical Addons For Elementor plugin <= 1.1.34 - Cross Site Scripting (XSS) vulnerability 0.3%