jackdewey

Products

ProductCVEsExploitedLatest
Community Events7–Mar 7, 2026
Link Library7–Oct 15, 2026
Bilingual Linker1–Jan 25, 2025
Events Listing Widget1–Feb 6, 2026
Tune Library1–Feb 6, 2026

Exploited and recent CVEs

  • CVE-2026-15090 High 7.5 Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameter 0.4%
  • CVE-2026-18855 Critical 9.1 Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter 1.4%
  • CVE-2026-2429 Medium 4.9 Community Events <= 1.5.8 - Authenticated (Administrator+) SQL Injection via 'ce_venue_name' CSV Field 0.4%
  • CVE-2026-1649 Medium 4.4 Community Events <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ce_venue_name' Parameter 0.3%
  • CVE-2026-1252 Medium 6.4 Events Listing Widget <= 1.3.4 - Authenticated (Author+) Stored Cross-Site Scripting via Event URL Field 0.3%
  • CVE-2026-1401 Medium 6.4 Tune Library <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via CSV Import 0.3%
  • CVE-2025-14029 Medium 5.3 Community Events <= 1.5.6 - Missing Authorization to Unauthenticated Arbitrary Event Approval via 'eventlist' Parameter 0.3%
  • CVE-2025-12646 High 7.5 Community Events <= 1.5.4 - Unauthenticated SQL Injection 0.3%
  • CVE-2025-11995 High 7.2 Community Events <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting 0.3%
  • CVE-2025-10586 Critical 9.8 Community Events <= 1.5.1 - Unauthenticated SQL Injection 0.5%
  • CVE-2025-10587 Critical 9.8 Community Events <= 1.5.1 - Unauthenticated SQL Injection 0.4%
  • CVE-2025-2889 Medium 6.4 Link Library <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional Parameters 0.3%
  • CVE-2024-13441 Medium 6.4 Bilingual Linker <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-13404 Medium 6.1 Link Library <= 7.7.2 - Reflected Cross-Site Scripting 0.3%
  • CVE-2024-4281 Medium 6.4 Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode 0.3%
  • CVE-2024-2325 Medium 6.1 Link Library <= 7.6.6 - Reflected Cross-Site Scripting 0.4%
  • CVE-2024-1559 Medium 6.5 Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting 0.4%