Log in Start free

gtlwpdev

Products

ProductCVEsExploitedLatest
All push notification for WP4–Feb 4, 2026

Exploited and recent CVEs

  • CVE-2026-0816 Medium 4.9 All push notification for WP <= 1.5.3 - Authenticated (Administrator+) SQL Injection via 'delete_id' Parameter 0.4%
  • CVE-2025-32546 High 7.1 WordPress All push notification for WP Plugin <= 1.5.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-32547 High 8.2 WordPress All push notification for WP Plugin <= 1.5.3 - CSRF to SQL Injection vulnerability 0.2%
  • CVE-2025-25092 High 7.1 WordPress All push notification for WP plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability 0.4%