alexvtn
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Chatbox Manager | 3 | – | Aug 27, 2025 |
| WIP WooCarousel Lite | 2 | – | Mar 27, 2025 |
| Custom Thank You Page for WooCommerce | 1 | – | Sep 24, 2026 |
| SuevaFree Essential Kit | 1 | – | Nov 21, 2024 |
| WIP Incoming Lite | 1 | – | Nov 21, 2024 |
| Internal Linking of Related Contents | 1 | – | Jul 16, 2025 |
| Content Snippet Manager | 1 | – | Feb 16, 2025 |
Exploited and recent CVEs
- CVE-2026-4806 Custom Thank You Page for WooCommerce <= 1.1.2 - Missing Authorization to Unauthenticated Settings Export and Settings Reset 0.2%
- CVE-2025-58211 WordPress Chatbox Manager Plugin <= 1.2.6 - Cross Site Scripting (XSS) Vulnerability 0.2%
- CVE-2025-49884 WordPress Internal Linking of Related Contents plugin <= 1.1.8 - Broken Access Control Vulnerability 0.3%
- CVE-2025-48167 WordPress Chatbox Manager plugin <= 1.2.5 - Broken Access Control Vulnerability 0.3%
- CVE-2025-30790 WordPress Chatbox Manager plugin <= 1.2.2 - Broken Access Control Vulnerability 0.5%
- CVE-2025-30769 WordPress WIP WooCarousel Lite plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability 0.2%
- CVE-2025-26759 WordPress Content Snippet Manager plugin <= 1.1.5 - CSRF to Stored XSS vulnerability 0.1%
- CVE-2024-11779 WIP WooCarousel Lite <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
- CVE-2024-11416 WIP Incoming Lite <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting 0.3%
- CVE-2024-11432 SuevaFree Essential Kit <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 1.2%