bnielsen
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Affiliate Disclosure Statement | 1 | – | Jan 7, 2025 |
| Custom Word Cloud | 1 | – | Aug 2, 2025 |
| Indeed API | 1 | – | Feb 7, 2025 |
Exploited and recent CVEs
- CVE-2025-8317 Custom Word Cloud <= 0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via angle Parameter 0.3%
- CVE-2025-25103 WordPress Indeed API Plugin <= 0.5 - CSRF to Settings Change vulnerability 0.2%
- CVE-2025-22552 WordPress Affiliate Disclosure Statement plugin <= 0.3 - CSRF to Stored XSS vulnerability 0.2%