a3rev
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| a3 Lazy Load | 2 | – | May 28, 2026 |
| Compare Products for WooCommerce | 2 | – | Jan 7, 2025 |
| Contact Us Page – Contact People | 1 | – | Jun 13, 2025 |
| Page View Count | 1 | – | May 1, 2025 |
| Product Sort and Display for WooCommerce | 1 | – | Apr 2, 2024 |
Exploited and recent CVEs
- CVE-2026-6427 a3 Lazy Load <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Element 0.3%
- CVE-2025-9873 a3 Lazy Load <= 2.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
- CVE-2025-5123 Contact Us Page – Contact People <= 3.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via style Parameter 0.2%
- CVE-2025-2816 Page View Count 2.8.0 - 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update 0.4%
- CVE-2024-12435 Compare Products for WooCommerce <= 3.2.1 - Reflected Cross-Site Scripting 0.4%
- CVE-2024-12313 Compare Products for WooCommerce <= 3.2.1 - Unauthenticated PHP Object Injection 0.8%
- CVE-2024-1807 Product Sort and Display for WooCommerce <= 2.4.1 - Missing Authorization 0.6%