Log in Start free

WPKube

Products

ProductCVEsExploitedLatest
Authors List5–Nov 11, 2025
Cool Tag Cloud2–Feb 20, 2026
Simple Basic Contact Form2–May 14, 2024
Social Sharing Plugin – Kiwi2–Jul 9, 2024
Subscribe To Comments Reloaded2–May 5, 2026
Subscribe To Comments Reloaded (WordPress plugin)1–Apr 29, 2022
Kiwi1–Sep 5, 2025
CAPTCHA 4WP1–Aug 6, 2026

Exploited and recent CVEs

  • CVE-2026-32469 Medium 5.3 WordPress CAPTCHA 4WP plugin <= 7.6.0 - Captcha Bypass vulnerability 0.3%
  • CVE-2026-4409 Medium 6.5 Subscribe To Comments Reloaded <= 240119 - Improper Authorization to Unauthenticated Arbitrary Subscription Management 0.2%
  • CVE-2025-69011 Medium 6.5 WordPress Cool Tag Cloud plugin <= 2.29 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-13614 High 8.1 Cool Tag Cloud <= 2.29 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
  • CVE-2025-12010 Medium 6.5 Authors List <= 2.0.6.1 - Authenticated (Contributor+) Sensitive Information Exposure via Limited Method Call in Plugin's Shortcode 0.4%
  • CVE-2025-58792 Medium 4.3 WordPress Authors List plugin <= 2.0.6.2 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-58790 Medium 6.5 WordPress Kiwi Plugin <= 2.1.8 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2024-13806 Medium 6.5 Authors List <= 2.0.6 - Unauthenticated Arbitrary Shortcode Execution 0.4%
  • CVE-2024-10952 High 7.3 Authors List <= 2.0.4 - Unauthenticated Arbitrary Shortcode Execution via update_authors_list_ajax 0.6%
  • CVE-2024-3228 Medium 5.3 Social Sharing Plugin – Kiwi <= 2.1.7 - Information Disclosure 0.4%
  • CVE-2024-4144 Medium 6.5 Simple Basic Contact Form <= 20240502 - Unauthenticated Arbitrary Shortcode Execution 0.7%
  • CVE-2024-4150 Medium 6.1 Simple Basic Contact Form <= 20221201 - Reflected Cross-Site Scripting 0.5%
  • CVE-2024-31249 Medium 5.3 WordPress Subscribe To Comments Reloaded plugin <= 220725 - Sensitive Data Exposure vulnerability 0.5%
  • CVE-2023-37981 High 7.1 WordPress Authors List Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2021-4362 Critical 9.8 The Kiwi Social Share plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the kiwi_social_share_get_option() function called via the kiwi_social_share_get_o 1.4%
  • CVE-2022-29414 Medium 5.4 WordPress Subscribe To Comments Reloaded plugin <= 211130 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities 0.4%