Smackcoders Inc.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP Ultimate Exporter | 3 | – | Oct 5, 2026 |
| AIO Performance Profiler, Monitor, Optimize, Compress & Debug | 2 | – | Apr 1, 2025 |
| Google SEO Pressor Snippet | 2 | – | Apr 1, 2025 |
| Lead Form Data Collection to CRM | 2 | – | May 23, 2025 |
| WP Ultimate CSV Importer | 2 | – | Oct 10, 2026 |
| SendGrid for WordPress | 1 | – | Jan 16, 2025 |
Exploited and recent CVEs
- CVE-2026-45440 WordPress WP Ultimate CSV Importer plugin <= 9.2 - SQL Injection vulnerability 0.3%
- CVE-2026-103348 WordPress WP Ultimate Exporter plugin <= 3.0 - PHP Object Injection vulnerability 0.4%
- CVE-2026-103336 WordPress WP Ultimate CSV Importer plugin <= 9.1 - Sensitive Data Exposure vulnerability 0.2%
- CVE-2025-47690 WordPress Lead Form Data Collection to CRM plugin <= 3.1 - Arbitrary Option Update to Privilege Escalation vulnerability 0.4%
- CVE-2025-31788 WordPress AIO Performance Profiler, Monitor, Optimize, Compress & Debug plugin <= 1.3 - Sensitive Data Exposure vulnerability 0.5%
- CVE-2025-31775 WordPress Google SEO Pressor for Rich snippets Plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2025-31530 WordPress Google SEO Pressor Snippet plugin <= 2.0 - Broken Access Control vulnerability 0.3%
- CVE-2025-22647 WordPress AIO Performance Profiler plugin <= 1.2 - Broken Access Control vulnerability 0.3%
- CVE-2025-30810 WordPress Lead Form Data Collection to CRM plugin <= 3.0.1 - SQL Injection vulnerability 0.5%
- CVE-2025-24611 WordPress Export All Posts, Products, Orders, Refunds & Users Plugin <= 2.9 - Arbitrary File Read vulnerability 0.7%
- CVE-2025-23423 WordPress SendGrid for WordPress plugin <= 1.4 - Broken Access Control vulnerability 0.4%
- CVE-2024-56278 WordPress WP Ultimate Exporter plugin <= 2.9.1 - Remote Code Execution (RCE) vulnerability 2.0%