nofearinc
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP-CRM System – Manage Clients and Projects | 2 | – | Sep 22, 2026 |
| DX Share Selection | 1 | – | Jul 18, 2022 |
| DX Unanswered Comments | 1 | – | Apr 22, 2026 |
Exploited and recent CVEs
- CVE-2026-9004 WP-CRM System <= 3.4.6 - Authenticated (Contributor+) Exposure of Sensitive Information via 'contact_id' Parameter 0.4%
- CVE-2026-4138 DX Unanswered Comments <= 1.7 - Cross-Site Request Forgery via Settings Update 0.2%
- CVE-2025-14854 WP-CRM System – Manage Clients and Projects <= 3.4.5 - Missing Authorization to Authenticated (Subscriber+) CRM Data Exposure and Task Modification 0.2%
- CVE-2022-2001 DX Share Selection <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting 0.6%