WPExpertsio
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| APIExperts Square for WooCommerce | 1 | – | Dec 13, 2024 |
| Email Templates Customizer and Designer for WordPress and WooCommerce | 1 | – | Nov 7, 2023 |
| New User Approve | 1 | – | Dec 29, 2023 |
| Rocket Maintenance Mode & Coming Soon Page | 1 | – | Dec 14, 2023 |
| WC Shop Sync – Integrate Square and WooCommerce for Seamless Shop Management | 1 | – | Mar 17, 2024 |
| WP Multi Store Locator Pro | 1 | – | Sep 18, 2026 |
| WP Multistore Locator — WP Store Locator Plugin: Effortless Integration With Snazzy Maps | 1 | – | Jan 4, 2025 |
Exploited and recent CVEs
- CVE-2026-15275 WP Multi Store Locator Pro <= 4.5.1 - Unauthenticated SQL Injection via 'store_locator_search_radius' Parameter 0.5%
- CVE-2024-12475 WP Multi Store Locator <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
- CVE-2022-47182 WordPress APIExperts Square for WooCommerce plugin <= 4.4.1 - Broken Access Control 0.5%
- CVE-2024-27959 WordPress APIExperts Square for WooCommerce plugin <= 4.2.9 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2023-50902 WordPress New User Approve Plugin <= 2.5.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
- CVE-2023-49842 WordPress Rocket Maintenance Mode & Coming Soon Page Plugin <= 4.3 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2022-47181 WordPress Email Templates Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%