awordpresslife
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Event Monster – Manager & Ticket Booking | 2 | – | Jan 13, 2025 |
| Formula | 2 | – | Jun 8, 2024 |
| Coming Soon Maintenance Mode | 1 | – | Feb 20, 2024 |
| Event Monster – Event Manager, Ticket Booking & Registration | 1 | – | Jun 5, 2026 |
| Grid Gallery for Images | 1 | – | May 2, 2024 |
| Modal Popup Box | 1 | – | Apr 4, 2024 |
| Neom Blog | 1 | – | Jul 4, 2025 |
| Photo Gallery for Images | 1 | – | May 2, 2024 |
| Portfolio Filter Gallery | 1 | – | Jun 27, 2024 |
| Album Gallery | 1 | – | Mar 1, 2025 |
| Responsive Slideshow | 1 | – | Mar 1, 2024 |
| Blog Filter Post Filtering | 1 | – | Oct 4, 2023 |
Exploited and recent CVEs
- CVE-2026-8608 Event Monster <= 2.1.0 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via em_capture_payment AJAX Action 0.2%
- CVE-2025-49274 WordPress Neom Blog theme <= 0.0.9 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-13833 Album Gallery – WordPress Gallery <= 1.6.3 - Authenticated (Editor+) PHP Object Injection via Gallery Meta 0.6%
- CVE-2024-11396 Event monster <= 1.4.3 - Information Exposure Via Visitors List Export 2.1%
- CVE-2024-6262 Portfolio Gallery – Image Gallery Plugin <= 1.6.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting 0.3%
- CVE-2024-5613 Formula <= 0.5.1 - Reflected Cross-Site Scripting via quality_customizer_notify_dismiss_action 0.4%
- CVE-2024-5638 Formula <= 0.5.1 - Reflected Cross-Site Scripting via ti_customizer_notify_dismiss_recommended_plugins 0.4%
- CVE-2024-1897 Grid Gallery – Photo Image Grid Gallery <= 1.4.3 - Authenticated (Contributor+) PHP Object Injection via shortcode 0.9%
- CVE-2024-1896 Photo Gallery <= 1.4.2 - Authenticated(Contributor+) PHP Object Injection via Shortcode 0.9%
- CVE-2024-1895 Event Monster <= 1.3.9 - Authenticated(Contributor+) PHP Object Injection via Custom Meta 0.9%
- CVE-2024-2008 Modal Popup Box – Popup Builder, Show Offers And News in Popup <= 1.5.2 - Authenticated (Contributor+) PHP Object Injection in awl_modal_popup_box_shortcode 0.9%
- CVE-2024-1859 Slider Responsive Slideshow – Image slider, Gallery slideshow <= 1.3.8 - Authenticated (Contributor+) PHP Object Injection 0.8%
- CVE-2024-1475 Coming Soon Maintenance Mode <= 1.0.5 - Information Exposure 0.5%
- CVE-2023-5291 Blog Filter <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.5%