Loopus
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP Cost Estimation & Payment Forms Builder | 5 | – | Jul 9, 2026 |
| WP Attractive Donations System - Easy Stripe & Paypal donations | 3 | – | Mar 5, 2026 |
| WP Virtual Assistant | 2 | – | Jan 8, 2026 |
| WP Attractive Donations System | 1 | – | Sep 22, 2025 |
| WP Ultimate Tours Builder | 1 | – | May 16, 2025 |
| WP Visitors Tracker | 1 | – | Jun 8, 2024 |
Exploited and recent CVEs
- CVE-2026-9253 WP Cost Estimation & Payment Forms Builder (E&P Forms) <= 10.5.97 - Unauthenticated Stored Cross-Site Scripting via 'customerInfos' Parameter 0.3%
- CVE-2026-24363 WordPress WP Cost Estimation & Payment Forms Builder plugin < 10.3.0 - Broken Access Control vulnerability 0.4%
- CVE-2026-28115 WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - SQL Injection vulnerability 0.3%
- CVE-2025-22725 WordPress WP Virtual Assistant plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-22715 WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - Arbitrary Content Deletion vulnerability 0.4%
- CVE-2025-58999 WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
- CVE-2025-60155 WordPress WP Virtual Assistant Plugin <= 3.0 - Broken Access Control Vulnerability 0.3%
- CVE-2025-58956 WordPress WP Attractive Donations System Plugin < 1.29 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
- CVE-2025-31921 WordPress WP Ultimate Tours Builder plugin <= 1.055 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
- CVE-2024-35737 WordPress WP Visitors Tracker plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-32510 WordPress WP Cost Estimation & Payment Forms Builder plugin <= 10.1.75 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2024-32509 WordPress WP Cost Estimation & Payment Forms Builder plugin <= 10.1.76 - Broken Access Control vulnerability 0.4%
- CVE-2024-30489 WordPress WP Cost Estimation & Payment Forms Builder plugin <= 10.1.75 - SQL Injection vulnerability 0.5%