javmah

Products

ProductCVEsExploitedLatest
WPGSI: Spreadsheet Integration3–Feb 25, 2026
Woocommerce Customers Order History1–Nov 1, 2024

Exploited and recent CVEs

  • CVE-2026-1916 High 7.5 WPGSI: Spreadsheet Integration <= 3.8.3 - Missing Authorization to Unauthenticated Arbitrary Post Creation and Deletion via Forged Base64 Token 0.4%
  • CVE-2025-1463 Medium 4.3 Spreadsheet Integration <= 3.8.2 - Cross-Site Request Forgery to Arbitrary Post Publish 0.2%
  • CVE-2024-37201 Medium 4.3 WordPress Woocommerce Customers Order History plugin <= 5.2.2 - Broken Access Control vulnerability 0.3%
  • CVE-2024-6590 Medium 6.3 Spreadsheet Integration – Automate Google Sheets With WordPress, WooCommerce & Most Popular Form Plugins. Also, Display Google sheet as a Table. <= 3.8.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update 0.3%