UPQODE
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Plum: Spin Wheel & Email Pop-up | 2 | – | Nov 1, 2024 |
| Whizzy | 2 | – | Jun 9, 2024 |
Exploited and recent CVEs
- CVE-2024-38743 WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control vulnerability 0.4%
- CVE-2024-38744 WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control to Unauth Stored XSS vulnerability 0.3%
- CVE-2024-30544 WordPress Whizzy plugin <= 1.1.18 - Broken Access Control vulnerability 0.4%
- CVE-2024-30543 WordPress Whizzy plugin <= 1.1.18 - Insecure Direct Object References (IDOR) vulnerability 0.4%