WPSight

Products

ProductCVEsExploitedLatest
WPCasa4–Mar 19, 2026

Exploited and recent CVEs

  • CVE-2025-62043 Medium 6.5 WordPress WPCasa plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2025-9321 Critical 9.8 WPCasa <= 1.4.1 - Unauthenticated Code Injection 0.8%
  • CVE-2025-39575 Medium 6.5 WordPress WPCasa plugin <= 1.3.2 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2024-53826 Medium 5.3 WordPress WPCasa plugin <= 1.2.13 - Insecure Direct Object References (IDOR) vulnerability 0.4%