letscms
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Binary MLM For WooCommerce | 2 | – | Jan 7, 2025 |
| Binary MLM Plan | 2 | – | Oct 17, 2025 |
| Unilevel MLM Plan | 1 | – | Jan 7, 2025 |
Exploited and recent CVEs
- CVE-2025-11895 Binary MLM Plan <= 5.0 - Authenticated (Subscriber+) Insecure Direct Object Reference 0.3%
- CVE-2025-10038 Binary MLM Plan <= 3.0 - Unauthenticated Limited Privilege Escalation 0.3%
- CVE-2024-12384 Binary MLM Woocommerce <= 2.0 - Reflected Cross-Site Scripting via 'page' 0.3%
- CVE-2024-12383 Binary MLM Woocommerce <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting 0.2%
- CVE-2024-12324 Unilevel MLM Plan <= 1.1.0 - Reflected Cross-Site Scripting via 'page' 0.4%