Xfinitysoft
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Content Cloner | 1 | – | Feb 3, 2025 |
| Order Limit for WooCommerce | 1 | – | Feb 25, 2025 |
| Reviewify — Review Discounts & Photo/Video Reviews for WooCommerce | 1 | – | Jan 7, 2026 |
| WP Post Hide | 1 | – | Jul 16, 2025 |
Exploited and recent CVEs
- CVE-2025-14070 Reviewify <= 1.0.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary WooCommerce Coupon Creation 0.4%
- CVE-2025-54042 WordPress WP Post Hide plugin <= 1.0.9 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
- CVE-2025-26928 WordPress Order Limit for WooCommerce plugin <= 3.0.2 - Broken Access Control vulnerability 0.3%
- CVE-2025-22681 WordPress Content Cloner plugin <= 1.0.1 - Broken Access Control vulnerability 0.3%