Rilwis
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Private Messages For WordPress (WordPress plugin) | 2 | – | Jun 15, 2022 |
| Slim SEO – A Fast & Automated SEO Plugin For WordPress | 2 | – | Jul 1, 2026 |
| Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated | 1 | – | Oct 16, 2026 |
Exploited and recent CVEs
- CVE-2026-104001 Slim SEO <= 4.11.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'Biographical Info' User Meta 0.2%
- CVE-2026-12408 Slim SEO <= 4.9.8 - Authenticated (Contributor+) Insufficient Authorization to Private Content Disclosure via 'object.ID' Parameter 0.4%
- CVE-2025-4611 Slim SEO <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via slim_seo_breadcrumbs Shortcode 0.5%
- CVE-2022-29442 Private Messages For WordPress <= 2.1.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 0.6%
- CVE-2022-29441 WordPress Private Messages For WordPress plugin <= 2.1.10 - Sending Messages via Cross-Site Request Forgery (CSRF) vulnerability 0.4%