RedNao
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Donations Made Easy – Smart Donations | 6 | – | Dec 13, 2024 |
| Extra Product Options Builder for WooCommerce | 1 | – | Apr 15, 2024 |
| PDF Builder for WPForms | 1 | – | Mar 27, 2024 |
| Smart Forms | 1 | – | Apr 29, 2024 |
| WooCommerce PDF Invoice Builder | 1 | – | Mar 16, 2024 |
| WooCommerce PDF Invoice Builder, Create invoices, packing slips and more | 1 | – | Oct 26, 2023 |
Exploited and recent CVEs
- CVE-2023-38475 WordPress Donations Made Easy – Smart Donations plugin <= 4.0.12 - Broken Access Control vulnerability 0.6%
- CVE-2024-33593 WordPress Smart Forms plugin <= 2.6.91 - Broken Access Control vulnerability 0.3%
- CVE-2024-31940 WordPress Extra Product Options Builder for WooCommerce plugin <= 1.2.104 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2024-29820 WordPress PDF Builder for WPForms plugin <= 1.2.88 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2023-51486 WordPress WooCommerce PDF Invoice Builder, Create invoices, packing slips and more plugin <= 1.2.101 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2023-47551 WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
- CVE-2023-47550 WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS) 0.2%
- CVE-2023-40207 WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to SQL Injection 0.7%
- CVE-2023-46076 WordPress WooCommerce PDF Invoice Builder Plugin <= 1.2.102 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2023-40664 WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2023-32603 WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS) 0.4%