Aviplugins.com
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP Register Profile With Shortcode | 2 | – | Jun 20, 2025 |
| Custom Post Type Attachment | 1 | – | Oct 27, 2025 |
| Login Widget With Shortcode | 1 | – | Dec 9, 2024 |
| Contact Form With Shortcode | 1 | – | Feb 14, 2025 |
| WP Booking | 1 | – | May 27, 2024 |
| WP Easy Poll | 1 | – | Apr 17, 2025 |
| Thumbnail Editor | 1 | – | Jun 27, 2025 |
Exploited and recent CVEs
- CVE-2025-62907 WordPress Custom Post Type Attachment plugin <= 3.4.6 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-53282 WordPress Thumbnail Editor plugin <= 2.3.3 - Cross Site Scripting (XSS) Vulnerability 0.2%
- CVE-2025-50042 WordPress WP Register Profile With Shortcode plugin <= 3.6.3 - Cross Site Scripting (XSS) Vulnerability 0.2%
- CVE-2025-32562 WordPress WP Easy Poll Plugin <= 2.2.9 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-24564 WordPress Contact Form With Shortcode plugin <= 4.2.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2024-54255 WordPress Login Widget With Shortcode plugin <= 6.1.2 - Open Redirection vulnerability 0.4%
- CVE-2024-35297 Cross-site scripting vulnerability exists in WP Booking versions prior to 2.4.5. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing 0.4%
- CVE-2023-23818 WordPress WP Register Profile With Shortcode Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS) 0.4%