digiblogger
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| BuddyHolis ListSearch | 1 | – | Feb 11, 2026 |
| BuddyHolis TableSearch | 1 | – | Jul 10, 2026 |
Exploited and recent CVEs
- CVE-2026-15301 BuddyHolis TableSearch <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
- CVE-2026-1853 BuddyHolis ListSearch <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'placeholder' Shortcode Attribute 0.3%