dgwyer

Products

Exploited and recent CVEs

  • CVE-2026-4011 Medium 6.4 Power Charts <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute 0.3%
  • CVE-2022-4974 Medium 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks 0.4%
  • CVE-2023-6492 Medium 4.3 Simple Sitemap <= 3.5.13 - Cross-Site Request Forgery via admin_notices 0.2%