eflyjason
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Host PHP Info | 1 | – | Jan 7, 2025 |
| Shortcode Button | 1 | – | Oct 15, 2025 |
| WP BBCode | 1 | – | Nov 11, 2025 |
Exploited and recent CVEs
- CVE-2025-11873 WP BBCode <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
- CVE-2025-10194 Shortcode Button <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
- CVE-2024-12535 Host PHP Info <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure 0.6%