Tomas
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WordPress Tooltips | 2 | – | Dec 31, 2025 |
| BuddyPress Members Only | 1 | – | Apr 1, 2025 |
Exploited and recent CVEs
- CVE-2025-63005 WordPress WordPress Tooltips plugin <= 10.9.3 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-31812 WordPress BuddyPress Members Only plugin <= 3.5.3 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2024-30243 WordPress Tooltips plugin < 9.4.5 - Auth. SQL Injection vulnerability 0.5%