prasadkirpekar
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Advanced Custom CSS | 1 | – | Dec 29, 2025 |
| WP Free SSL – Free SSL Certificate for WordPress and force HTTPS | 1 | – | Nov 1, 2024 |
| WP Meta and Date Remover | 1 | – | Dec 9, 2024 |
Exploited and recent CVEs
- CVE-2025-68878 WordPress Advanced Custom CSS plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2023-47836 WordPress WP Meta and Date Remover plugin <= 2.3.0 - Broken Access Control vulnerability 0.4%
- CVE-2024-44020 WordPress WP Free SSL plugin <= 1.2.6 - Broken Access Control vulnerability 0.2%