Log in Start free

damian-gora

Products

ProductCVEsExploitedLatest
FiboSearch – Ajax Search for WooCommerce4–Oct 16, 2026
Justified Gallery1–May 1, 2026

Exploited and recent CVEs

  • CVE-2026-100106 Medium 6.4 FiboSearch <= 1.34.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'purchased_plan' Parameter 0.2%
  • CVE-2024-13362 Medium 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
  • CVE-2025-14298 Medium 5.4 FiboSearch – Ajax Search for WooCommerce <= 1.32.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via thegem_te_search Shortcode 0.3%
  • CVE-2022-4974 Medium 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks 0.4%
  • CVE-2023-2450 Medium 4.4 The FiboSearch - AJAX Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.23.0 due to insufficient input sa 0.6%