WP CodeUs

Products

ProductCVEsExploitedLatest
Advanced Sermons4–Jun 17, 2025
WP Proposals2–Sep 22, 2025
Ultimate Client Dash1–Sep 5, 2025

Exploited and recent CVEs

  • CVE-2025-57965 Medium 6.5 WordPress WP Proposals Plugin <= 2.3 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-58811 Medium 5.9 WordPress Ultimate Client Dash Plugin <= 4.7 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-49863 Medium 6.5 WordPress Advanced Sermons plugin <= 3.6 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-31837 Medium 5.9 WordPress WP Proposals plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-50458 Medium 6.5 WordPress Advanced Sermons plugin <= 3.4 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-29928 High 7.1 WordPress Advanced Sermons plugin <= 3.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-27952 High 7.1 WordPress Advanced Sermons plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability 0.4%