mitchelllevy

Products

ProductCVEsExploitedLatest
AHAthat Plugin2–May 6, 2025

Exploited and recent CVEs

  • CVE-2025-4337 Medium 4.3 AHAthat Plugin <= 1.6 - Cross-Site Request Forgery to AHA Page Deletion 0.2%
  • CVE-2025-2511 Medium 4.9 AHAthat Plugin <= 1.6 - Authenticated (Administrator+) SQL Injection via id Parameter 0.4%