amu02aftab
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Category and Taxonomy Meta Fields | 3 | – | Oct 22, 2024 |
| Client Testimonial Slider | 2 | – | Feb 19, 2026 |
| Category and Taxonomy Image | 1 | – | Oct 22, 2024 |
| Enable Shortcodes inside Widgets,Comments and Experts | 1 | – | Oct 30, 2024 |
Exploited and recent CVEs
- CVE-2026-2716 Client Testimonial Slider <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Testimonial Heading' Setting 0.2%
- CVE-2025-13897 Client Testimonial Slider <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aft_testimonial_meta_name' Metabox Field 0.3%
- CVE-2024-9846 Enable Shortcodes inside Widgets,Comments and Experts <= 1.0.0 - Unauthenticated Arbitrary Shortcode Execution 0.6%
- CVE-2024-9589 Category and Taxonomy Meta Fields <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.3%
- CVE-2024-9591 Category and Taxonomy Image <= 1.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting 0.3%
- CVE-2024-9590 Category and Taxonomy Meta Fields <= 1.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting 0.3%
- CVE-2024-9588 Category and Taxonomy Meta Fields <= 1.0.0 - Cross-Site Request Forgery to Taxonomy Meta Add/Delete 0.2%