blakelong
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Custom Frames | 1 | – | Dec 13, 2025 |
| Tournament Bracket Generator | 1 | – | Jun 26, 2025 |
Exploited and recent CVEs
- CVE-2025-13705 Custom Frames <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Parameter 0.2%
- CVE-2025-6290 Tournament Bracket Generator <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via bracket Shortcode 0.2%