colorlibplugins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| FancyBox for WordPress | 2 | – | Dec 4, 2024 |
| Coming Soon & Maintenance Mode by Colorlib | 1 | – | Mar 20, 2024 |
| Simple Custom Post Order | 1 | – | Oct 21, 2024 |
Exploited and recent CVEs
- CVE-2024-5020 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library 0.4%
- CVE-2024-49321 WordPress Simple Custom Post Order plugin <= 2.5.7 - Broken Access Control vulnerability 0.3%
- CVE-2024-0662 The FancyBox for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions 3.0.2 to 3.3.3 due to insufficient input sanitization and output escaping. T 0.5%
- CVE-2024-1473 Coming Soon & Maintenance Mode by Colorlib <= 1.0.99 - Information Exposure 0.5%