Shellbot

Products

ProductCVEsExploitedLatest
Easy Image Display1–Mar 11, 2025
Ravelry Designs Widget1–Feb 14, 2026

Exploited and recent CVEs

  • CVE-2026-1903 Medium 6.4 Ravelry Designs Widget <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sb_ravelry_designs' Shortcode 'layout' Attribute 0.3%
  • CVE-2025-28919 Medium 6.5 WordPress Easy Image Display plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability 0.3%