WEN Solutions

Products

Product	CVEs	Exploited	Latest
Notice Bar	2	–	Aug 20, 2025
WP Child Theme Generator	2	–	Jun 21, 2024
Contact Form 7 GetResponse Extension	1	–	Jan 23, 2026
WP Easy FAQs	1	–	Sep 11, 2025
WP Travel	1	–	Sep 10, 2026
WS Theme Addons	1	–	Aug 23, 2025

CVE-2026-81796 High 7.3 WordPress WP Travel plugin <= 12.0.3 - Broken Authentication vulnerability 0.4%
CVE-2026-24557 Medium 5.3 WordPress Contact Form 7 GetResponse Extension plugin <= 1.0.8 - Sensitive Data Exposure vulnerability 0.3%
CVE-2025-8686 Medium 6.4 WP Easy FAQs <= 1.0.5 - Authenticated (Author+) Stored Cross-Site Scripting via WP_EASY_FAQ Shortcode 0.3%
CVE-2025-8062 Medium 6.4 WS Theme Addons <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ws_weather Shortcode 0.3%
CVE-2025-49389 Medium 6.5 WordPress Notice Bar Plugin <= 3.1.3 - Cross Site Scripting (XSS) Vulnerability 0.2%
CVE-2024-3610 Medium 5.3 WP Child Theme Generator <= 1.1.1 - Missing Authorization to Unauthenticated Child Theme Creation/Activation 0.5%
CVE-2023-47873 Critical 9.1 WordPress WP Child Theme Generator plugin <= 1.0.9 - Arbitrary File Upload vulnerability 2.3%
CVE-2023-41847 Medium 6.5 WordPress Notice Bar Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS) 0.4%