benmoody
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Content Syndication Toolkit | 1 | – | Mar 21, 2026 |
| WP Headless CMS Framework | 1 | – | Nov 13, 2025 |
Exploited and recent CVEs
- CVE-2026-3478 Content Syndication Toolkit <= 1.3 - Unauthenticated Server-Side Request Forgery via 'url' Parameter 0.3%
- CVE-2025-11260 WP Headless CMS Framework <= 1.15 - Unauthenticated Protection Mechanism Bypass 0.4%