infosatech
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| RevivePress – Keep your Old Content Evergreen | 2 | – | May 1, 2026 |
| WP Last Modified Info | 2 | – | Feb 14, 2026 |
| WP Page Permalink Extension | 1 | – | Jan 9, 2026 |
Exploited and recent CVEs
- CVE-2024-13362 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
- CVE-2025-14608 WP Last Modified Info <= 1.9.5 - Insecure Direct Object Reference to Authenticated (Author+) Post Metadata Modification 0.3%
- CVE-2025-14172 WP Page Permalink Extension <= 1.5.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Rewrite Rules Flush 0.4%
- CVE-2024-6864 WP Last Modified Info <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via lmt-post-modified-info Shortcode 0.3%
- CVE-2024-1844 RevivePress – Keep your Old Content Evergreen <= 1.5.6 - Missing Authorization 0.4%