giuliopanda

Products

ProductCVEsExploitedLatest
ADFO – Custom data in admin dashboard3–Feb 19, 2025
ADFO1–Feb 24, 2025
Bulk images optimizer: Resize, optimize, convert to webp, rename …1–Oct 18, 2024

Exploited and recent CVEs

  • CVE-2025-27300 High 7.2 WordPress ADFO plugin <= 1.9.1 - Deserialization of untrusted data vulnerability 0.7%
  • CVE-2024-13390 Medium 6.4 ADFO – Custom data in admin dashboard <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-9361 Medium 4.3 Bulk images optimizer: Resize, optimize, convert to webp, rename ... <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Options Update 0.3%
  • CVE-2024-4104 Medium 6.1 ADFO – Custom data in admin dashboard <= 1.9.0 - Reflected Cross-Site Scripting 0.5%
  • CVE-2024-4103 Medium 4.3 ADFO – Custom data in admin dashboard <= 1.9.0 - Cross-Site Request Forgery 0.2%