PluginsPoint

Products

ProductCVEsExploitedLatest
Justified Image Gallery1–Jan 7, 2025
Kento Ads Rotator1–Nov 10, 2024
Kento Splash Screen1–Aug 28, 2025
Kento WordPress Stats1–Apr 1, 2025
Timeline Pro1–Jan 7, 2025

Exploited and recent CVEs

  • CVE-2025-48351 High 7.1 WordPress Kento Splash Screen plugin <= 1.4 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability 0.1%
  • CVE-2025-30559 High 7.1 WordPress Kento WordPress Stats plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-22518 Medium 6.5 WordPress Justified Image Gallery plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2025-22584 Medium 6.5 WordPress Timeline Pro plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-51583 Medium 6.5 WordPress Kento Ads Rotator plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability 0.3%