SecureSubmit
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP SecureSubmit | 2 | – | Jan 7, 2025 |
| Heartland Management Terminal | 1 | – | Mar 3, 2025 |
Exploited and recent CVEs
- CVE-2025-23520 WordPress Heartland Management Terminal plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2024-56270 WordPress WP SecureSubmit plugin <= 1.5.20 - Sensitive Data Exposure vulnerability 0.4%
- CVE-2024-56271 WordPress WP SecureSubmit plugin <= 1.5.20 - Broken Access Control vulnerability 0.3%