Log in Start free

azzaroco

Products

ProductCVEsExploitedLatest
WP SuperBackup5–Jan 2, 2025
Ultimate Membership Pro4–Mar 25, 2026
Ultimate Learning Pro2–Mar 5, 2026
Indeed Ultimate Learning Pro1–Feb 21, 2025
Super Backup & Clone - Migrate for WordPress1–Dec 13, 2024

Exploited and recent CVEs

  • CVE-2026-25357 High 8.1 WordPress Ultimate Membership Pro plugin <= 13.7 - Account Takeover vulnerability 0.4%
  • CVE-2026-28113 High 7.1 WordPress Ultimate Learning Pro plugin <= 3.9.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-64251 Medium 4.9 WordPress Ultimate Learning Pro plugin <= 3.9.3 - Arbitrary Content Deletion vulnerability 0.3%
  • CVE-2024-13846 Medium 4.9 Indeed Ultimate Learning Pro <= 3.9 - Authenticated (Administrator+) SQL Injection via post_id Parameter 0.4%
  • CVE-2024-56069 High 7.1 WordPress WP SuperBackup plugin <= 2.3.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-56070 High 7.4 WordPress WP SuperBackup plugin <= 2.3.3 - Multiple Subscriber+ Broken Access Control vulnerabilities 0.4%
  • CVE-2024-56064 Critical 10.0 WordPress WP SuperBackup plugin <= 2.3.3 - Unauthenticated Arbitrary File Upload vulnerability 33.2%
  • CVE-2024-56068 High 7.5 WordPress WP SuperBackup plugin <= 2.3.3 - Subscriber+ PHP Object Injection vulnerability 0.4%
  • CVE-2024-56067 High 7.5 WordPress WP SuperBackup plugin <= 2.3.3 - Unauthenticated Backup File Download Vulnerability 11.7%
  • CVE-2024-9290 Critical 9.8 Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Upload 3.5%
  • CVE-2024-43242 Critical 9.0 WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated PHP Object Injection vulnerability 0.5%
  • CVE-2024-43240 Critical 9.4 WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated Privilege Escalation vulnerability 0.5%
  • CVE-2024-43241 High 7.1 WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%