fahadmahmood
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Keep Backup Daily | 3 | – | Mar 20, 2026 |
| WP Datepicker | 2 | – | Dec 24, 2024 |
| WP Docs | 2 | – | Apr 16, 2026 |
| Easy Upload Files During Checkout | 2 | – | Jul 10, 2026 |
| RSS Feed Widget | 1 | – | Oct 18, 2024 |
| WP Responsive Tabs | 1 | – | Jan 16, 2025 |
| Export Customers Data | 1 | – | Dec 24, 2024 |
| Injection Guard | 1 | – | Mar 20, 2026 |
| Order Splitter for WooCommerce | 1 | – | Feb 18, 2026 |
Exploited and recent CVEs
- CVE-2026-6802 Easy Upload Files During Checkout <= 3.0.1 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'eufdc-delete' Parameter 0.4%
- CVE-2026-3878 WP Docs <= 2.2.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpdocs_options[icon_size]' 0.2%
- CVE-2026-3577 Keep Backup Daily <= 2.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Backup Title 0.2%
- CVE-2026-3368 Injection Guard <= 1.2.9 - Unauthenticated Stored Cross-Site Scripting via Query Parameter Name 0.3%
- CVE-2026-3339 Keep Backup Daily <= 2.1.1 - Authenticated (Admin+) Limited Path Traversal via 'kbd_path' Parameter 0.4%
- CVE-2025-12075 Order Splitter for WooCommerce <= 5.3.5 - Missing Authorization to Authenticated (Subscriber+) Order Information Exposure 0.2%
- CVE-2025-12682 Easy Upload Files During Checkout <= 2.9.8 - Unauthenticated Arbitrary JavaScript File Upload 0.7%
- CVE-2024-13387 WP Responsive Tabs <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
- CVE-2024-12468 WP Datepicker <= 2.1.4 - Reflected Cross-Site Scripting 0.5%
- CVE-2024-12405 Export Customers Data <= 1.2.3 - Reflected Cross-Site Scripting 0.3%
- CVE-2024-12635 WP Docs <= 2.2.0 - Authenticated (Subscriber+) Time-Based SQL Injection via 'dir_id' 0.4%
- CVE-2024-10057 RSS Feed Widget <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via rfw-youtube-videos Shortcode 0.3%
- CVE-2024-3895 WP Datepicker <= 2.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update 0.9%
- CVE-2022-1820 Keep Backup Daily <= 2.0.2 - Reflected Cross-Site Scripting 1.1%