cybio
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Floatbox Plus | 1 | – | Jan 16, 2025 |
| Gallery Widget | 1 | – | Jul 4, 2025 |
| GravatarLocalCache | 1 | – | Jan 16, 2025 |
| TinyCode | 1 | – | Nov 19, 2024 |
Exploited and recent CVEs
- CVE-2025-28969 WordPress Gallery Widget plugin <= 1.2.1 - SQL Injection Vulnerability 0.3%
- CVE-2025-23901 WordPress GravatarLocalCache plugin <= 1.1.2 - CSRF to Stored XSS vulnerability 0.2%
- CVE-2025-23617 WordPress Floatbox Plus plugin <= 1.4.4 - CSRF to Stored XSS vulnerability 0.2%
- CVE-2024-51902 WordPress TinyCode plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability 0.3%