WWebvitaly

Products

Exploited and recent CVEs

• CVE-2026-9008 Medium 4.3 Page-list <= 6.2 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure via Shortcode Attributes 0.2%
• CVE-2025-62111 Medium 6.5 WordPress Extra Shortcodes plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-53467 Medium 5.9 WordPress Login-Logout Plugin <= 3.8 - Cross Site Scripting (XSS) Vulnerability 0.3%
• CVE-2025-58030 Medium 6.5 WordPress Page-list Plugin <= 5.8 - Cross Site Scripting (XSS) Vulnerability 0.2%
• CVE-2025-58229 Medium 6.5 WordPress Sitekit Plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability 0.2%
• CVE-2025-58832 Medium 5.9 WordPress Search by Google Plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability 0.2%
• CVE-2025-50047 Medium 6.5 WordPress Sitekit plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability 0.2%
• CVE-2025-30776 Medium 6.5 WordPress Sitekit plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability 0.4%
• CVE-2024-51896 Medium 6.5 WordPress Magic Slider plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-47382 Medium 6.5 WordPress Page-list plugin <= 5.6 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2023-6844 Medium 5.0 iframe <= 5.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode 0.4%
• CVE-2024-34805 Medium 6.5 WordPress iframe plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-29111 Medium 6.5 WordPress Sitekit plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2023-52125 Medium 6.5 WordPress iFrame Plugin <= 4.8 is vulnerable to Cross Site Scripting (XSS) 0.3%
• CVE-2023-4919 Medium 6.4 iframe <= 4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'iframe' Shortcode 0.6%
• CVE-2023-5071 Medium 6.4 Sitekit <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sitekit_iframe' shortcode 0.5%
• CVE-2023-27628 Medium 6.5 WordPress Sitekit Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS) 0.4%