Ddartiss

Products

Exploited and recent CVEs

• CVE-2026-49466 Medium 6.5 Draft List - Contributor Stored Cross-Site Scripting via Draft Title in Custom Drafts Template Attributes 0.3%
• CVE-2026-48093 Medium 6.5 Code Embed - Contributor Stored Cross-Site Scripting via Remote URL Embed 0.3%
• CVE-2026-48094 Medium 5.3 ShareOpenly has Cross-Site Scripting (XSS) via Missing esc_url() on Shared URL in Content Output 0.5%
• CVE-2026-9104 Medium 6.4 Draft List <= 2.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via Draft Post Title 0.2%
• CVE-2026-6809 Medium 6.4 Social Post Embed <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Threads Embed 0.2%
• CVE-2026-4006 Medium 6.4 Draft List <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'display_name' Parameter 0.3%
• CVE-2026-2512 Medium 6.4 Code Embed <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Fields 0.2%
• CVE-2025-11197 Medium 6.4 Draft List <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
• CVE-2025-10181 Medium 6.4 Draft List <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
• CVE-2024-10814 Medium 6.4 Code Embed <= 2.5 - Authenticated (Contributor+) Server-Side Request Forgery 0.3%
• CVE-2024-8804 Medium 6.4 Code Embed <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%