Log in Start free

Magazine3

Products

ProductCVEsExploitedLatest
Schema & Structured Data for WP & AMP11–Oct 16, 2026
Easy Table of Contents3–Mar 13, 2026
WP Multilang2–Aug 18, 2026
PWA for WP – Progressive Web Apps Made Simple2–Jun 7, 2023
Core Web Vitals & PageSpeed Booster1–Dec 19, 2023
WP Multilang – Translation and Multilingual Plugin1–Sep 24, 2026
Google Adsense & Banner Ads by AdsforWP1–Jan 2, 2025
PWA for WP & AMP1–Nov 1, 2024
Web Stories Enhancer – Level Up Your Web Stories1–Feb 18, 2025

Exploited and recent CVEs

  • CVE-2026-96570 High 7.2 Schema & Structured Data for WP & AMP <= 1.67 - Unauthenticated Stored Cross-Site Scripting via 'saswp_review_text' Parameter 0.3%
  • CVE-2026-97291 High 8.8 WordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-15731 Medium 6.4 WP Multilang – Translation and Multilingual Plugin <= 2.4.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content 0.2%
  • CVE-2026-73342 High 7.1 WordPress WP Multilang plugin <= 2.4.31 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-32343 Medium 4.3 WordPress Easy Table of Contents plugin <= 2.0.80 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-13738 Medium 6.4 Easy Table of Contents <= 2.0.78 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2025-14069 Medium 6.4 Schema & Structured Data for WP & AMP <= 1.54 - Authenticated (Contributor+) Stored Cross-Site Scripting via User Custom Schema 0.3%
  • CVE-2025-11502 Medium 6.4 Schema & Structured Data for WP & AMP <= 1.51 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2025-49307 High 7.5 WordPress WP Multilang plugin <= 2.4.19 - Local File Inclusion Vulnerability 0.8%
  • CVE-2024-13575 Medium 6.4 Web Stories Enhancer – Level Up Your Web Stories <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
  • CVE-2024-38751 Medium 4.3 WordPress AdsforWP plugin <= 1.9.28 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2023-25469 Medium 5.4 WordPress Easy Table of Contents plugin <= 2.0.45.2 - Broken Access Control vulnerability 0.6%
  • CVE-2024-47318 Medium 4.3 WordPress PWA for WP & AMP plugin <= 1.7.72 - Broken Access Control vulnerability 0.3%
  • CVE-2024-49683 Medium 5.3 WordPress Schema & Structured Data for WP & AMP plugin <= 1.3.5 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2024-5582 Medium 6.4 Schema & Structured Data for WP & AMP <= 1.33 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute 0.4%
  • CVE-2024-3491 Medium 6.4 Schema & Structured Data for WP & AMP <= 1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via How To and FAQ Blocks 0.3%
  • CVE-2024-1288 Medium 4.3 Schema & Structured Data for WP & AMP <= 1.26 - Missing Authorization to reCaptcha Key Modification 0.4%
  • CVE-2024-1586 Medium 6.4 Schema & Structured Data for WP & AMP <= 1.26 - Authenticated (Custom) Stored Cross-Site Scripting 0.4%
  • CVE-2023-51677 Medium 6.5 WordPress Schema & Structured Data for WP & AMP Plugin <= 1.23 is vulnerable to Cross Site Scripting (XSS) 0.3%
  • CVE-2024-22146 Medium 6.5 WordPress Schema & Structured Data for WP & AMP Plugin <= 1.25 is vulnerable to Cross Site Scripting (XSS) 0.3%
  • CVE-2023-35883 Medium 4.7 WordPress Core Web Vitals & PageSpeed Booster Plugin <= 1.0.12 is vulnerable to Open Redirection 0.5%
  • CVE-2021-4366 Medium 6.3 PWA for WP & AMP < = 1.7.32 - Missing Authorization 0.6%
  • CVE-2021-4354 High 8.8 PWA for WP & AMP <= 1.7.32 - Arbitrary File Upload 1.8%