ankitpokhrel

Products

ProductCVEsExploitedLatest
Dynamic Featured Image1–Sep 5, 2024
WooCommerce Multiple Free Gift1–Sep 14, 2024

Exploited and recent CVEs

  • CVE-2022-3459 Medium 5.3 WooCommerce Multiple Free Gift <= 1.2.3 - Insufficient Server-Side Validation to Arbitrary Gift Adding 0.3%
  • CVE-2024-6929 Medium 6.4 Dynamic Featured Image <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via dfiFeatured Parameter 0.3%