ghera74
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ilGhera Support System for WooCommerce | 2 | – | May 13, 2026 |
| ilGhera Carta Docente for WooCommerce | 1 | – | Mar 20, 2026 |
| ilGhera Reviso Exporter for WooCommerce | 1 | – | Sep 9, 2026 |
| MailUp Auto Subscription | 1 | – | Jan 28, 2025 |
Exploited and recent CVEs
- CVE-2026-8615 ilGhera Reviso Exporter for WooCommerce <= 1.2.3 - Missing Authorization to Authenticated (Subscriber+) Agreement Grant Token Deletion via disconnect_callback Function 0.3%
- CVE-2025-14033 ilGhera Support System for WooCommerce <= 1.3.0 - Missing Authorization to Unauthenticated Sensitive Information Exposure 0.3%
- CVE-2026-2421 ilGhera Carta Docente for WooCommerce <= 1.5.0 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'cert' Parameter 0.5%
- CVE-2025-14034 ilGhera Support System for WooCommerce <= 1.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Ticket Deletion 0.3%
- CVE-2024-13521 MailUp Auto Subscription <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting 0.1%