josevega
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Display custom fields in the frontend – Post and User Profile Fields | 3 | – | Feb 5, 2024 |
| Disable Payment Methods based on cart conditions for WooCommerce | 1 | – | May 1, 2026 |
| WP Page Templates | 1 | – | May 1, 2026 |
| WP Required Taxonomies – Categories and Tags Mandatory | 1 | – | Oct 16, 2024 |
Exploited and recent CVEs
- CVE-2024-13362 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
- CVE-2024-13362 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
- CVE-2022-4974 Freemius SDK <= 2.4.2 - Missing Authorization Checks 0.4%
- CVE-2023-6996 Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Authenticated (Contributor+) Code Injection 1.1%
- CVE-2023-6982 Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via vg_display_data 0.4%
- CVE-2023-6983 Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Meta Disclosure 0.5%