phppoet
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| SysBasics Customize My Account for WooCommerce – Dashboard, Endpoints, Avatar & Menu Manager | 2 | – | Jun 18, 2026 |
| SysBasics Customize My Account for WooCommerce | 1 | – | Nov 9, 2024 |
| SysBasics Customize My Account for WooCommerce – Live My Account Customizer | 1 | – | Jul 16, 2026 |
Exploited and recent CVEs
- CVE-2026-15324 SysBasics Customize My Account for WooCommerce <= 4.4.14 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'row_type' Parameter 0.3%
- CVE-2026-12137 SysBasics Customize My Account for WooCommerce <= 4.3.6 - Reflected Cross-Site Scripting via 'tab' Parameter 0.2%
- CVE-2026-12136 SysBasics Customize My Account for WooCommerce <= 4.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.2%
- CVE-2024-10837 SysBasics Customize My Account for WooCommerce <= 2.7.29 - Reflected Cross-Site Scripting via tab Parameter 0.4%