PluginsCafe
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Address Autocomplete via Google for Gravity Forms | 1 | – | Jun 27, 2025 |
| Advanced Data Table For Elementor | 1 | – | Dec 16, 2024 |
| Range Slider Addon for Gravity Forms | 1 | – | Nov 6, 2025 |
| Smart phone field for Gravity Forms | 1 | – | May 1, 2026 |
Exploited and recent CVEs
- CVE-2024-13362 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
- CVE-2025-49905 WordPress Range Slider Addon for Gravity Forms plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-53263 WordPress Address Autocomplete via Google for Gravity Forms plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
- CVE-2024-54443 WordPress Advanced Data Table For Elementor plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability 0.4%