bouncingsprout
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Block, Suspend, Report for BuddyPress | 1 | – | Jul 9, 2026 |
| Ultimeter | 1 | – | Oct 16, 2024 |
Exploited and recent CVEs
- CVE-2026-4653 Block, Suspend, Report for BuddyPress <= 3.6.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link' Parameter 0.3%
- CVE-2022-4974 Freemius SDK <= 2.4.2 - Missing Authorization Checks 0.4%