AddonsPress
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Advanced Import | 1 | – | Jun 19, 2026 |
| Nepali Date Converter | 1 | – | Apr 15, 2025 |
Exploited and recent CVEs
- CVE-2026-4328 Advanced Import: One-Click Demo Import for WordPress <= 1.4.6 - Authenticated (Author+) Server-Side Request Forgery via 'demo_file' Parameter 0.3%
- CVE-2025-26950 WordPress Nepali Date Converter plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability 0.3%