newbiesup

Products

ProductCVEsExploitedLatest
WP Frontend Submit1–Mar 3, 2025
WP Random Button1–Mar 21, 2026

Exploited and recent CVEs

  • CVE-2026-4086 Medium 6.4 WP Random Button <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cat' Shortcode Attribute 0.2%
  • CVE-2025-25133 High 7.1 WordPress WP Frontend Submit Plugin <= 1.1.0 - Reflected Cross-Site Scripting vulnerability 0.3%