mlfactory

Products

ProductCVEsExploitedLatest
DSGVO All in one for WP3–Oct 29, 2026
DSGVO Google Web Fonts GDPR1–Apr 8, 2026
Shirt Product Designer for WooCommerce1–Sep 10, 2026

Exploited and recent CVEs

  • CVE-2026-96741 High 7.2 DSGVO All in one for WP <= 5.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Output Buffer Regex Corruption 0.2%
  • CVE-2026-81794 High 7.5 WordPress Shirt Product Designer for WooCommerce plugin 1.0.4 - Broken Access Control vulnerability 0.3%
  • CVE-2026-4298 Medium 4.3 DSGVO All in one for WP <= 4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset 0.4%
  • CVE-2026-3535 Critical 9.8 DSGVO Google Web Fonts GDPR <= 1.1 - Unauthenticated Arbitrary File Upload via 'fonturl' Parameter 0.9%
  • CVE-2024-13356 Medium 6.5 DSGVO All in one for WP <= 4.6 - Cross-Site Request Forgery to Account Deletion 0.2%