Log in Start free

WebCodingPlace

Products

ProductCVEsExploitedLatest
Ultimate Classified Listings6–Sep 11, 2025
Real Estate Manager Pro4–Aug 15, 2026
Responsive Posts Carousel Pro4–Mar 5, 2026
Classic Addons – WPBakery Page Builder3–Jan 7, 2025
WooCommerce Coming Soon Product with Countdown2–Mar 5, 2026
Product Expiry for WooCommerce2–Jun 11, 2024
Image Caption Hover Pro1–Dec 9, 2025

Exploited and recent CVEs

  • CVE-2026-15142 High 7.5 Real Estate Manager Pro <= 12.8.6 - Authenticated (Subscriber+) Privilege Escalation via 'user_has_cap' Filter ID Collision 0.4%
  • CVE-2026-57701 High 7.1 WordPress Real Estate Manager Pro plugin <= 12.8.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-57398 High 7.1 WordPress Real Estate Manager Pro plugin <= 12.8.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-27361 High 7.5 WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Broken Access Control vulnerability 0.4%
  • CVE-2026-27354 Medium 6.5 WordPress WooCommerce Coming Soon Product with Countdown plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-68552 High 7.5 WordPress WooCommerce Coming Soon Product with Countdown plugin <= 5.0 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-68996 High 7.5 WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Local File Inclusion vulnerability 0.4%
  • CVE-2025-68548 Medium 6.5 WordPress Responsive Posts Carousel Pro plugin <= 15.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-67562 Medium 5.4 WordPress Image Caption Hover Pro plugin < 20.0 - Broken Access Control vulnerability 0.3%
  • CVE-2025-9874 High 7.5 Ultimate Classified Listings <= 1.6 - Authenticated (Contributor+) Local File Inclusion 1.0%
  • CVE-2025-0763 Medium 4.3 Ultimate Classified Listings <= 1.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update 0.2%
  • CVE-2025-54032 High 7.1 WordPress Real Estate Manager Pro Plugin <= 12.7.3 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-52728 High 7.5 WordPress Responsive Posts Carousel WordPress Plugin Plugin <= 15.0 - Local File Inclusion Vulnerability 0.7%
  • CVE-2024-13753 High 8.1 Ultimate Classified Listings <= 1.5 - Cross-Site Request Forgery to Account Takeover 0.3%
  • CVE-2024-13748 Medium 4.4 Ultimate Classified Listings <= 1.4 Authenticated (Administrator+) Stored Cross-Site Scripting via Title Parameter 0.2%
  • CVE-2024-56286 High 7.5 WordPress Classic Addons – WPBakery Page Builder plugin <= 3.0 - Local File Inclusion vulnerability 0.6%
  • CVE-2024-11952 High 7.5 Classic Addons – WPBakery Page Builder <= 3.0 - Authenticated (Contributor+) Limited Local PHP File Inclusion 0.9%
  • CVE-2024-52487 Medium 6.5 WordPress Ultimate Classified Listings plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-52448 High 7.5 WordPress Ultimate Classified Listings plugin <= 1.7 - Local File Inclusion vulnerability 0.6%
  • CVE-2024-43953 Medium 6.5 WordPress Classic Addons – WPBakery Page Builder plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-52179 Medium 5.4 WordPress Product Expiry for WooCommerce plugin <= 2.5 - Broken Access Control vulnerability 0.3%
  • CVE-2024-0201 Medium 5.4 Product Expiry for WooCommerce <= 2.5 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update 0.4%