awcode
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| AWcode Toolkit | 2 | – | May 19, 2025 |
| ReviewsTap | 1 | – | Jan 24, 2025 |
| Salvador – AI Image Generator | 1 | – | Jan 16, 2025 |
| Unique UX | 1 | – | Jan 22, 2025 |
Exploited and recent CVEs
- CVE-2025-48238 WordPress AWcode Toolkit plugin <= 1.0.18 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability 0.1%
- CVE-2025-24554 WordPress AWcode Toolkit plugin <= 1.0.14 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-24561 WordPress ReviewsTap plugin <= 1.1.2 - CSRF to Stored Cross-Site Scripting vulnerability 0.2%
- CVE-2025-23625 WordPress Unique UX plugin <= 0.9.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2025-23954 WordPress Salvador – AI Image Generator plugin <= 1.0.11 - Broken Access Control vulnerability 0.3%