magicplugins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Magic Conversation For Gravity Forms | 1 | – | Apr 8, 2026 |
| Magic Tooltips For Contact Form 7 | 1 | – | Oct 3, 2026 |
Exploited and recent CVEs
- CVE-2026-101928 Magic Tooltips For Contact Form 7 <= 1.0.34 - Unauthenticated Stored Cross-Site Scripting via 'esc_html' Filter Override via Comment Author 0.3%
- CVE-2026-1396 Magic Conversation For Gravity Forms <= 3.0.97 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.2%