Apasionados
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| DoFollow Case by Case | 4 | – | Oct 2, 2026 |
| Export Post Info (WordPress plugin) | 2 | – | Sep 23, 2022 |
| Comment Blacklist Updater | 1 | – | Dec 13, 2024 |
| Email Notification on Login | 1 | – | May 7, 2025 |
| Submission DOM tracking for Contact Form 7 | 1 | – | May 7, 2025 |
Exploited and recent CVEs
- CVE-2026-95817 DoFollow Case by Case <= 3.6.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content 0.2%
- CVE-2025-62102 WordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
- CVE-2025-47626 WordPress Submission DOM tracking for Contact Form 7 plugin <= 2.1 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-47625 WordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-47624 WordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2025-47622 WordPress Email Notification on Login plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2023-44147 WordPress Comment Blacklist Updater plugin <= 1.1.0 - Broken Access Control vulnerability 0.5%
- CVE-2022-38061 WordPress Export Post Info plugin <= 1.2.0 - Authenticated CSV Injection vulnerability 0.8%
- CVE-2022-38068 WordPress Export Post Info plugin <= 1.1.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 0.6%