cscode
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| EleForms – All In One Form Integration including DB for Elementor | 4 | – | Nov 16, 2024 |
| WooCommerce Estimate and Quote | 1 | – | Apr 17, 2025 |
| WooCommerce Manager – Customize and Control Cart page, Add to Cart button, Checkout fields easily | 1 | – | Jun 20, 2025 |
Exploited and recent CVEs
- CVE-2025-50008 WordPress WooCommerce Manager – Customize and Control Cart page, Add to Cart button, Checkout fields easily plugin <= 1.2.4.5 - Broken Access Control Vulnerability 0.3%
- CVE-2025-32514 WordPress WooCommerce Estimate and Quote plugin <= 1.0.2.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-6628 EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Cross-Site Request Forgery 0.2%
- CVE-2024-6626 EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Missing Authorization 0.4%
- CVE-2024-2082 EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.7 - Unauthenticated Stored Cross-Site Scripting 0.4%
- CVE-2024-2043 EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.7 - Missing Authorization to Sensitive Information Exposure 0.5%