TODO
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Advanced Custom Fields | 1 | – | Aug 22, 2022 |
| Advanced Custom Fields Pro | 1 | – | Aug 22, 2022 |
| Advanced Forms | 1 | – | Nov 23, 2021 |
| Advanced Forms Ppro | 1 | – | Nov 23, 2021 |
| Integration for Billingo & Gravity Forms | 1 | – | Oct 10, 2022 |
| Integration for Szamlazz.hu & Gravity Forms | 1 | – | Oct 10, 2022 |
| Video Lessons Manager – Best Video Course LMS | 1 | – | Nov 23, 2021 |
| Video Lessons Manager Pro – Best Video Course LMS | 1 | – | Nov 23, 2021 |
| Woo Billingo Plus | 1 | – | Oct 10, 2022 |
Exploited and recent CVEs
- CVE-2022-3154 Multiple Plugins from Viszt Peter - Multiple CSRF 0.4%
- CVE-2022-3154 Multiple Plugins from Viszt Peter - Multiple CSRF 0.4%
- CVE-2022-3154 Multiple Plugins from Viszt Peter - Multiple CSRF 0.4%
- CVE-2022-2594 Advanced Custom Fields 5.0-5.12.2 - Unauthenticated File Upload 1.6%
- CVE-2022-2594 Advanced Custom Fields 5.0-5.12.2 - Unauthenticated File Upload 1.6%
- CVE-2021-24892 Advanced Forms < 1.6.9 - Subscriber+ Arbitrary User Email Address Update via IDOR 1.9%
- CVE-2021-24892 Advanced Forms < 1.6.9 - Subscriber+ Arbitrary User Email Address Update via IDOR 1.9%
- CVE-2021-24713 Video Lessons Manager - Admin+ Stored Cross-Site Scripting 0.6%
- CVE-2021-24713 Video Lessons Manager - Admin+ Stored Cross-Site Scripting 0.6%