gqevu6bsiz
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Announce from the Dashboard | 2 | – | Apr 4, 2024 |
| My WP Customize Admin/Frontend | 1 | – | Dec 17, 2024 |
| WP Admin UI Customize | 1 | – | Nov 26, 2024 |
Exploited and recent CVEs
- CVE-2024-55864 Cross-site scripting vulnerability exists in My WP Customize Admin/Frontend versions prior to ver 1.24.1. If a malicious administrative user customizes the administrative page with some malicious cont 0.3%
- CVE-2024-53278 Cross-site scripting vulnerability exists in WP Admin UI Customize versions prior to ver 1.5.14. If a malicious admin user customizes the admin screen with some malicious contents, an arbitrary script 0.4%
- CVE-2024-3030 Announce from the Dashboard <= 1.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting 0.4%
- CVE-2023-25716 WordPress Announce from the Dashboard Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS) 0.4%