GrandPlugins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| AVIF Uploader | 1 | – | Oct 1, 2024 |
| Direct Checkout – Quick View – Buy Now For WooCommerce | 1 | – | Nov 13, 2023 |
| Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes | 1 | – | Jun 20, 2025 |
Exploited and recent CVEs
- CVE-2025-49973 WordPress Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes plugin <= 1.0.10 - Broken Access Control Vulnerability 0.3%
- CVE-2024-9060 AVIF & SVG Uploader <= 1.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.4%
- CVE-2023-47657 WordPress Direct Checkout – Quick View – Buy Now For WooCommerce Plugin <= 1.5.8 is vulnerable to Cross Site Scripting (XSS) 0.4%