cssigniterteam
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Elements Plus! | 2 | – | Sep 11, 2025 |
| GutenBee – Gutenberg Blocks | 2 | – | May 28, 2026 |
| AudioIgniter Music Player | 1 | – | May 22, 2026 |
Exploited and recent CVEs
- CVE-2026-9227 GutenBee <= 2.20.1 - Authenticated (Author+) Arbitrary File Upload via wp_check_filetype_and_ext Filter 0.7%
- CVE-2026-8679 AudioIgniter Music Player <= 2.0.2 - Unauthenticated Insecure Direct Object Reference to 'audioigniter_playlist_id' Parameter 1.6%
- CVE-2025-8566 GutenBee – Gutenberg Blocks <= 2.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
- CVE-2025-8689 Elements Plus! <= 2.16.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets 0.2%
- CVE-2024-2335 Elements Plus! <= 2.16.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget links 0.3%