Scriptonite

Products

ProductCVEsExploitedLatest
Simple User Profile1–Feb 7, 2025
user files1–Jan 22, 2025

Exploited and recent CVEs

  • CVE-2025-25140 High 7.1 WordPress Simple User Profile plugin <= 1.9 - CSRF to Stored XSS vulnerability 0.1%
  • CVE-2025-23953 Critical 10.0 WordPress user files plugin <= 2.4.2 - Arbitrary File Upload vulnerability 0.7%