bitacre
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Super Simple Contact Form | 1 | – | Feb 14, 2026 |
| WP-Clippy | 1 | – | May 5, 2026 |
Exploited and recent CVEs
- CVE-2026-5505 WP-Clippy <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.2%
- CVE-2026-0753 Super Simple Contact Form <= 1.6.2 - Reflected Cross-Site Scripting via 'sscf_name' Parameter 0.4%