kylephillips

Products

ProductCVEsExploitedLatest
Favorites2–Mar 30, 2024
Nested Pages2–Jul 4, 2024
Simple Locator1–Dec 14, 2024

Exploited and recent CVEs

  • CVE-2024-12501 Medium 6.4 Simple Locator <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
  • CVE-2024-5943 High 8.8 Nested Pages <= 3.2.7 - Cross-Site Request Forgery to Local File Inclusion 0.3%
  • CVE-2024-2948 Medium 6.4 Favorites <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.4%
  • CVE-2023-2304 Medium 6.4 Favorites <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.7%
  • CVE-2023-2434 Low 3.8 Nested Pages <= 3.2.3 - Missing Authorization to Authenticated (Editor+) Plugin Settings Reset 0.7%