Saiful Islam
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| UltraAddons Elementor Lite | 4 | – | May 16, 2025 |
| Add to Cart Text Changer and Customize Button, Add Custom Icon | 1 | – | Dec 18, 2023 |
| Product Table for WooCommerce | 1 | – | Jan 9, 2025 |
| Sync Master Sheet – Product Sync with Google Sheet for WooCommerce | 1 | – | Feb 20, 2026 |
Exploited and recent CVEs
- CVE-2025-68834 WordPress Sync Master Sheet – Product Sync with Google Sheet for WooCommerce plugin <= 1.1.3 - Broken Access Control vulnerability 0.3%
- CVE-2025-48131 WordPress UltraAddons Elementor Lite plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-32264 WordPress UltraAddons – Elementor Addons plugin <= 2.0.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2025-22307 WordPress Product Table for WooCommerce plugin <= 4.0.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-49277 WordPress UltraAddons – Elementor Addons plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-37554 WordPress UltraAddons plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2023-49153 WordPress Add to Cart Text Changer and Customize Button, Add Custom Icon Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%