codeclouds

Products

ProductCVEsExploitedLatest
Unify2–Jan 7, 2026

Exploited and recent CVEs

  • CVE-2025-13529 Medium 5.3 Unify <= 3.4.9 - Missing Authorization to Unauthenticated Option Deletion via 'unify_plugin_downgrade' Parameter 0.3%
  • CVE-2025-9130 Medium 6.4 Unify <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via unify_checkout Shortcode 0.3%