papin
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Companion Auto Update | 1 | – | Jul 15, 2025 |
| Companion Portfolio – Responsive Portfolio Plugin | 1 | – | Dec 14, 2024 |
Exploited and recent CVEs
- CVE-2025-4369 Companion Auto Update <= 3.9.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via update_delay_days parameter 0.3%
- CVE-2024-11867 Companion Portfolio – Responsive Portfolio Plugin <= 2.4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%