johnjamesjacoby
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| A/B Testing for WordPress | 1 | – | Jun 27, 2025 |
| bbPress | 1 | – | Mar 5, 2025 |
| Post Type Switcher | 1 | – | Nov 18, 2025 |
Exploited and recent CVEs
- CVE-2025-12524 Post Type Switcher <= 4.0.0 - Insecure Direct Object Reference to Authenticated (Author+) Post Type Change 0.3%
- CVE-2025-4587 A/B Testing for WordPress <= 1.18.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
- CVE-2025-1435 bbPress <= 2.6.11 - Cross-Site Request Forgery to Limited Privilege Escalation 0.2%