creativeon
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WHMpress | 2 | – | Aug 19, 2024 |
| WHMCS Client Area for WordPress by WHMpress | 1 | – | Feb 28, 2025 |
| WHMpress - WHMCS WordPress Integration Plugin | 1 | – | Feb 28, 2025 |
Exploited and recent CVEs
- CVE-2024-9195 WHMPress - WHMCS Client Area <= 4.3-revision-3- Authenticated (Subscriber+) Arbitrary Options Update 0.4%
- CVE-2024-9193 WHMpress <= 6.3-revision-0 - Unauthenticated Local File Inclusion to Arbitrary Options Update 3.3%
- CVE-2024-43247 WordPress WHMpress plugin <= 6.2-revision-5 - Subscriber+ Arbitrary Settings Change vulnerability 0.4%
- CVE-2024-43246 WordPress WHMpress plugin <= 6.2-revision-5 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%