GregRoss

Products

ProductCVEsExploitedLatest
Auto iFrame1–Oct 9, 2024
CYAN Backup1–Nov 8, 2025
Just Writing Statistics1–Jun 3, 2024

Exploited and recent CVEs

  • CVE-2025-12092 Medium 6.5 CYAN Backup <= 2.5.4 - Authenticated (Admin+) Arbitrary File Deletion 0.8%
  • CVE-2024-9449 Medium 6.4 Auto iFrame <= 1.7 - Authenticated (Author+) Stored Cross-Site Scripting via tag Parameter 0.3%
  • CVE-2024-35641 Medium 5.9 WordPress Just Writing Statistics plugin <= 4.5 - Cross Site Scripting (XSS) vulnerability 0.3%