a3rev Software
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WooCommerce Predictive Search | 2 | – | Dec 13, 2024 |
| a3 Portfolio | 1 | – | Aug 14, 2023 |
| Contact Us Page – Contact People | 1 | – | Mar 1, 2023 |
| Page View Count (WordPress plugin) | 1 | – | Nov 3, 2022 |
Exploited and recent CVEs
- CVE-2023-32963 WordPress Predictive Search for WooCommerce plugin <= 5.8.0 - Broken Access Control vulnerability 0.5%
- CVE-2024-38669 WordPress Predictive Search for WooCommerce plugin <= 6.0.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2023-29097 WordPress a3 Portfolio Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2023-23973 WordPress Contact Us page - Contact people LITE Plugin <= 3.7.0 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
- CVE-2022-40131 WordPress Page View Count plugin <= 2.5.5 - Cross-Site Request Forgery (CSRF) vulnerability 0.3%