mihdan
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Maps from Yandex for Elementor | 1 | – | Sep 30, 2025 |
| Mihdan: No External Links | 1 | – | Sep 22, 2025 |
| Mihdan: Yandex Turbo Feed | 1 | – | May 9, 2024 |
| No External Links | 1 | – | Oct 2, 2026 |
Exploited and recent CVEs
- CVE-2026-95670 No External Links <= 5.2.0 - Unauthenticated Stored Cross-Site Scripting via Log URL via /goto/{base64} Redirect 0.2%
- CVE-2025-8608 Mihdan: Elementor Yandex Maps <= 1.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Marker Pins 0.2%
- CVE-2025-53451 WordPress Mihdan: No External Links Plugin <= 5.1.6.2 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
- CVE-2024-4411 Mihdan: Yandex Turbo Feed <= 1.6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.4%