hookandhook
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Coming Soon & Maintenance Mode Page & Under Construction | 2 | – | Jul 12, 2023 |
| WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses | 2 | – | Aug 25, 2026 |
| Post Grid Elementor Addon | 1 | – | Jan 2, 2025 |
| WP Courses LMS | 1 | – | Mar 25, 2026 |
Exploited and recent CVEs
- CVE-2026-10630 WP Courses LMS <= 3.2.29 - Insecure Direct Object Reference to Authenticated (Custom+) Sensitive Information Disclosure via 'resultID' Parameter 0.5%
- CVE-2026-31914 WordPress WP Courses LMS plugin <= 3.2.26 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2024-56268 WordPress Post Grid Elementor Addon plugin <= 2.0.18 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2024-12172 WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses <= 3.2.21 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Update 0.8%
- CVE-2020-36752 Coming Soon & Maintenance Mode Page <= 1.57 - Cross-Site Request Forgery Bypass 0.5%
- CVE-2020-36707 Coming Soon & Maintenance Mode Page <= 1.57 - Cross-Site Request Forgery 0.5%