Scriptonite
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Simple User Profile | 1 | – | Feb 7, 2025 |
| user files | 1 | – | Jan 22, 2025 |
Exploited and recent CVEs
- CVE-2025-25140 WordPress Simple User Profile plugin <= 1.9 - CSRF to Stored XSS vulnerability 0.1%
- CVE-2025-23953 WordPress user files plugin <= 2.4.2 - Arbitrary File Upload vulnerability 0.7%