WP Zone
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Custom CSS and JavaScript | 1 | – | Aug 6, 2026 |
| Inline Image Upload for BBPress | 1 | – | Jan 5, 2024 |
| Potent Donations for WooCommerce | 1 | – | Jul 10, 2023 |
Exploited and recent CVEs
- CVE-2026-66683 WordPress Custom CSS and JavaScript plugin <= 2.0.16 - Sensitive Data Exposure vulnerability 0.3%
- CVE-2023-51668 WordPress Inline Image Upload for BBPress Plugin <= 1.1.18 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
- CVE-2023-35912 WordPress Potent Donations for WooCommerce Plugin <= 1.1.9 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%