manchumahara
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| CBX 5 Star Rating & Review | 1 | – | May 22, 2026 |
| CBX Bookmark & Favorite | 1 | – | Jan 6, 2026 |
| CBX Map for Google Map & OpenStreetMap | 1 | – | Sep 11, 2025 |
Exploited and recent CVEs
- CVE-2026-6864 CBX 5 Star Rating & Review <= 1.0.7 - Reflected Cross-Site Scripting via 'page' Parameter 0.3%
- CVE-2025-13652 CBX Bookmark & Favorite <= 2.0.4 - Authenticated (Subscriber+) SQL Injection via `orderby` Parameter 1.1%
- CVE-2025-9123 CBX Map for Google Map & OpenStreetMap <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%