iThemelandCo

Products

Product	CVEs	Exploited	Latest
WPBULKiT – Bulk Edit WordPress Posts & Pages	2	–	May 16, 2024
GIFTiT – Free Gifts for WooCommerce	1	–	Oct 30, 2026
REPORTiT – Advanced Reporting for WooCommerce	1	–	Nov 5, 2024
WooCommerce Report	1	–	Jul 20, 2024

CVE-2026-52710 Medium 5.3 WordPress GIFTiT – Free Gifts for WooCommerce plugin <= 4.5 - Content Injection vulnerability 0.3%
CVE-2024-10711 High 8.8 WooCommerce Report <= 1.5.1 - Cross-Site Request Forgery to Arbitrary Options Update 0.3%
CVE-2024-38683 High 7.1 WordPress WooCommerce Report plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
CVE-2024-4204 Medium 4.3 Bulk Posts Editing For WordPress <= 4.2.3 - Cross-Site Request Forgery 0.2%
CVE-2024-4199 Medium 4.3 Bulk Posts Editing For WordPress <= 4.2.3 - Authenticated (Subscriber+) Missing Authorization 0.3%