hk1993

Products

ProductCVEsExploitedLatest
WP Online Users Stats2–Jun 6, 2025
WP Contact Form7 Email Spam Blocker1–Jan 25, 2025

Exploited and recent CVEs

  • CVE-2025-4964 Medium 4.9 WP Online Users Stats <= 1.0.0 - Authenticated (Editor+) SQL Injection via table_name Parameter 0.4%
  • CVE-2025-4966 Medium 6.1 WP Online Users Stats <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via hk_dataset_results Function 0.2%
  • CVE-2024-13467 Medium 6.1 WP Contact Form7 Email Spam Blocker <= 1.0.0 - Reflected Cross-Site Scripting 0.3%