horearadu
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Mesmerize Companion | 2 | – | Feb 19, 2026 |
| Materialis Companion | 1 | – | Jun 6, 2024 |
| One Page Express Companion | 1 | – | Jun 7, 2024 |
Exploited and recent CVEs
- CVE-2025-12027 Mesmerize Companion <= 1.6.158 - Missing Authorization Authenticated (Subscriber+) Settings Update 0.3%
- CVE-2024-4703 One Page Express Companion <= 1.6.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via one_page_express_contact_form Shortcode 0.3%
- CVE-2024-4707 Materialis Companion <= 1.3.41 - Authenticated (Contributor+) Store Cross-Site Scripting via materialis_contact_form Shortcode 0.3%
- CVE-2024-3494 Mesmerize Companion <= 1.6.148 - Authenticated (Contributor+) Stored Cross-Site Scripting via mesmerize_contact_form Shortcode 0.3%