alleythemes
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Alley Elementor Widget | 1 | – | Nov 19, 2024 |
| Home Services | 1 | – | Apr 15, 2025 |
Exploited and recent CVEs
- CVE-2025-26930 WordPress Home Services plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-50521 WordPress Alley Elementor Widget plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability 0.4%