SolaPlugins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Nifty Newsletters | 1 | – | Aug 5, 2021 |
| Sola Support Ticket | 1 | – | Jun 6, 2025 |
| Super Testimonials | 1 | – | Sep 26, 2024 |
Exploited and recent CVEs
- CVE-2023-25997 WordPress Sola Support Ticket <= 3.17 - Arbitrary Content Deletion Vulnerability 0.3%
- CVE-2024-9127 Super Testimonials <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter 0.3%
- CVE-2021-34634 Nifty Newsletters <= 4.0.23 - Cross-Site Request Forgery to Stored Cross-Site Scripting 0.7%