Log in Start free

Frenify

Products

ProductCVEsExploitedLatest
Categorify – WordPress Media Library Category & File Manager10–Mar 13, 2024
Arlo2–Jan 7, 2026
Categorify1–Sep 9, 2025
Guff1–Mar 5, 2026
Mow1–Sep 9, 2025

Exploited and recent CVEs

  • CVE-2026-28076 High 7.5 WordPress Guff theme <= 1.0.1 - Broken Access Control vulnerability 0.3%
  • CVE-2025-69082 High 7.1 WordPress Arlo theme <= 6.0.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-58997 Critical 9.6 WordPress Mow Theme <= 4.10 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2025-59005 Medium 4.3 WordPress Categorify plugin <= 1.0.7.5 - Broken Access Control vulnerability 0.2%
  • CVE-2025-39475 High 8.1 WordPress Arlo theme <= 6.0.3 - Local File Inclusion Vulnerability 0.7%
  • CVE-2024-0385 Medium 4.3 Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxAddCategory 0.6%
  • CVE-2024-1650 Medium 4.3 Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxRenameCategory 0.3%
  • CVE-2024-1649 Medium 4.3 Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxDeleteCategory 0.3%
  • CVE-2024-1910 Medium 4.3 Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxClearCategory 0.2%
  • CVE-2024-1652 Medium 4.3 Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxClearCategory 0.3%
  • CVE-2024-1906 Medium 4.3 Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxAddCategory 0.2%
  • CVE-2024-1912 Medium 4.3 Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxUpdateFolderPosition 0.2%
  • CVE-2024-1909 Medium 4.3 Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxRenameCategory 0.2%
  • CVE-2024-1653 Medium 4.3 Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxUpdateFolderPosition 0.3%
  • CVE-2024-1907 Medium 4.3 Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxDeleteCategory 0.2%