Jason Lau
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Add User Meta | 1 | – | Aug 15, 2025 |
| Hide It | 1 | – | Jun 6, 2025 |
| User Meta Manager | 1 | – | Apr 23, 2023 |
Exploited and recent CVEs
- CVE-2025-7688 Add User Meta <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting 0.2%
- CVE-2025-5565 Hide It <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
- CVE-2023-22718 WordPress User Meta Manager Plugin <= 3.4.9 is vulnerable to Cross Site Scripting (XSS) 0.4%