giuliopanda
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ADFO – Custom data in admin dashboard | 3 | – | Feb 19, 2025 |
| ADFO | 1 | – | Feb 24, 2025 |
| Bulk images optimizer: Resize, optimize, convert to webp, rename … | 1 | – | Oct 18, 2024 |
Exploited and recent CVEs
- CVE-2025-27300 WordPress ADFO plugin <= 1.9.1 - Deserialization of untrusted data vulnerability 0.7%
- CVE-2024-13390 ADFO – Custom data in admin dashboard <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
- CVE-2024-9361 Bulk images optimizer: Resize, optimize, convert to webp, rename ... <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Options Update 0.3%
- CVE-2024-4104 ADFO – Custom data in admin dashboard <= 1.9.0 - Reflected Cross-Site Scripting 0.5%
- CVE-2024-4103 ADFO – Custom data in admin dashboard <= 1.9.0 - Cross-Site Request Forgery 0.2%