UPQODE

Products

ProductCVEsExploitedLatest
Plum: Spin Wheel & Email Pop-up2–Nov 1, 2024
Whizzy2–Jun 9, 2024

Exploited and recent CVEs

  • CVE-2024-38743 Medium 5.3 WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control vulnerability 0.4%
  • CVE-2024-38744 High 8.3 WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control to Unauth Stored XSS vulnerability 0.3%
  • CVE-2024-30544 Medium 5.3 WordPress Whizzy plugin <= 1.1.18 - Broken Access Control vulnerability 0.4%
  • CVE-2024-30543 Medium 6.5 WordPress Whizzy plugin <= 1.1.18 - Insecure Direct Object References (IDOR) vulnerability 0.4%