Log in Start free

Stiofan

Products

ProductCVEsExploitedLatest
UsersWP5–Oct 9, 2026
GetPaid3–Oct 28, 2026
BlockStrap Page Builder - Bootstrap Blocks2–Oct 9, 2026
Events Calendar for GeoDirectory2–Jun 15, 2026
AyeCode Connect1–Jan 2, 2025

Exploited and recent CVEs

  • CVE-2026-115609 High 7.1 WordPress GetPaid plugin <= 2.8.62 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-94641 High 7.1 WordPress UsersWP plugin <= 1.2.73 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-94632 High 7.1 WordPress BlockStrap Page Builder - Bootstrap Blocks plugin <= 0.1.58 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-103086 Medium 6.5 WordPress UsersWP plugin <= 1.2.74 - Broken Access Control vulnerability 0.2%
  • CVE-2026-39532 High 8.8 WordPress Events Calendar for GeoDirectory plugin <= 2.3.25 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-49064 High 7.5 WordPress GetPaid plugin <= 2.8.49 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-25015 Medium 4.3 WordPress UsersWP plugin <= 1.2.53 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-67593 Medium 4.3 WordPress UsersWP plugin <= 1.2.48 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-66072 Medium 5.3 WordPress UsersWP plugin <= 1.2.47 - Broken Access Control vulnerability 0.3%
  • CVE-2025-30951 Medium 6.5 WordPress BlockStrap Page Builder - Bootstrap Blocks plugin <= 0.1.36 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-26967 High 8.8 WordPress Events Calendar for GeoDirectory plugin <= 2.3.14 - PHP Object Injection vulnerability 0.7%
  • CVE-2024-56255 Medium 4.3 WordPress AyeCode Connect plugin <= 1.3.8 - Broken Access Control vulnerability 0.3%
  • CVE-2024-43973 Medium 4.3 WordPress GetPaid plugin <= 2.8.11 - Broken Access Control vulnerability 0.5%