RedefiningTheWeb
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| PDF Generator Addon for Elementor Page Builder | 3 | – | Apr 1, 2025 |
| Affiliate Program & Referral Tracking for WooCommerce & WordPress – Affilia | 1 | – | Jul 11, 2026 |
| BMA Lite | 1 | – | Apr 16, 2025 |
| Dynamic Pricing & Discounts Lite for WooCommerce | 1 | – | May 19, 2025 |
| PDF Generator for WordPress Elementor | 1 | – | Nov 16, 2024 |
| WordPress & WooCommerce Affiliate Program | 1 | – | Oct 1, 2024 |
| Affiliate Pro - Affiliate Program for WooCommerce & WordPress | 1 | – | Aug 24, 2026 |
| WordPress Contact Form 7 PDF, Google Sheet & Database | 1 | – | Dec 18, 2025 |
Exploited and recent CVEs
- CVE-2026-32558 WordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress plugin <= 8.9.1 - Privilege Escalation vulnerability 0.5%
- CVE-2026-7559 Affilia <= 3.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Status Modification 0.5%
- CVE-2025-64231 WordPress WordPress Contact Form 7 PDF, Google Sheet & Database plugin <= 3.0.0 - Arbitrary File Upload vulnerability 0.3%
- CVE-2025-48342 WordPress Dynamic Pricing & Discounts Lite for WooCommerce plugin <= 2.0.3 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
- CVE-2025-39518 WordPress BMA Lite plugin <= 1.4.2 - SQL Injection vulnerability 0.6%
- CVE-2025-31850 WordPress PDF Generator Addon for Elementor Page Builder plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-24569 WordPress PDF Generator Addon for Elementor Page Builder plugin <= 1.7.5 - Arbitrary File Read vulnerability 0.6%
- CVE-2024-9935 PDF Generator Addon for Elementor Page Builder <= 2.0.0 - Unauthenticated Arbitrary File Download 7.6%
- CVE-2024-50449 WordPress PDF Generator Addon for Elementor Page Builder plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-9289 WordPress & WooCommerce Affiliate Program <= 8.4.1 - Authentication Bypass to Account Takeover and Privilege Escalation 0.6%