Arevico
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Multi Functional Flexi Lightbox | 1 | – | Mar 21, 2026 |
| WP Simple Redirect | 1 | – | Jan 22, 2026 |
| WP Tactical Popup | 1 | – | Oct 22, 2025 |
Exploited and recent CVEs
- CVE-2026-3347 Multi Functional Flexi Lightbox <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting via 'message' Parameter 0.3%
- CVE-2025-68884 WordPress WP Simple Redirect plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-58921 WordPress WP Tactical Popup plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%