Skip to content

bulktheme

Products

Product	CVEs	Exploited	Latest
WOOEXIM	2	–	Jan 22, 2025
WP Social Meta	1	–	Feb 26, 2026

Exploited and recent CVEs

CVE-2026-2498 Medium 4.4 WP Social Meta <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings 0.2%
CVE-2025-23944 High 8.8 WordPress WOOEXIM Plugin <= 5.0.0 - PHP Object Injection vulnerability 0.7%
CVE-2025-22533 High 7.6 WordPress WOOEXIM Plugin <= 5.0.0 - SQL Injection vulnerability 0.6%