dfieldfl

Products

ProductCVEsExploitedLatest
WP Allowed Hosts1–Jan 14, 2026

Exploited and recent CVEs

  • CVE-2026-0734 Medium 4.4 WP Allowed Hosts <= 1.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'allowed-hosts' Parameter 0.2%