kevinweber

Products

ProductCVEsExploitedLatest
Lazy Load for Videos1–Aug 27, 2025
wBounce1–Mar 28, 2025

Exploited and recent CVEs

  • CVE-2025-7732 Medium 6.4 Lazy Load for Videos <= 2.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via data-video-title and href Attributes 0.3%
  • CVE-2025-31451 Medium 6.5 WordPress wBounce plugin <= 1.8.1 - Cross Site Scripting (XSS) Vulnerability 0.2%