Pprasunsen

Products

Exploited and recent CVEs

• CVE-2026-1645 Medium 4.4 Hostel <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'custom_currency' Parameter and Localization file URL Setting 0.3%
• CVE-2026-3907 Medium 6.4 Hostel <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wphostel-book' Shortcode 0.4%
• CVE-2026-1838 Medium 6.1 Hostel <= 1.1.6 - Reflected Cross-Site Scripting via 'shortcode_id' Parameter 0.3%
• CVE-2025-11238 High 7.2 Watu Quiz <= 3.4.4 - Unauthenticated Stored Cross-Site Scripting via HTTP Referer 0.3%
• CVE-2025-10493 Medium 5.3 Chained Quiz <= 1.3.5 - Unauthenticated Insecure Direct Object Reference via Cookie 0.9%
• CVE-2024-4314 Medium 4.3 hostel <= 1.1.5.3 - Cross-Site Request Forgery 0.2%
• CVE-2024-0873 Medium 6.4 Watu Quiz <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.5%
• CVE-2024-0872 Medium 4.3 Watu Quiz <= 3.4.1 - Sensitive Information Disclosure 0.5%
• CVE-2023-4602 Medium 6.1 Namaste! LMS <= 2.6.1.1 - Reflected Cross-Site Scripting 0.7%
• CVE-2023-0968 Medium 6.1 Watu Quiz <= 3.3.9 - Reflected Cross-Site Scripting 1.3%
• CVE-2022-4216 Medium 5.5 Chained Quiz <= 1.3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Facebook App ID 0.7%
• CVE-2022-4217 Medium 5.5 Chained Quiz <= 1.3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Mailchimp API Key 0.7%
• CVE-2022-4212 Medium 6.1 Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via ipf 0.9%
• CVE-2022-4211 Medium 6.1 Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via emailf 0.9%
• CVE-2022-4210 Medium 6.1 Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via dnf 0.9%
• CVE-2022-4209 Medium 6.1 Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via pointsf 0.9%
• CVE-2022-4208 Medium 6.1 Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via datef 0.9%
• CVE-2022-4213 Medium 6.1 Chained Quiz <= 1.3.2.2 - Reflected Cross-Site Scripting via dn 0.7%
• CVE-2022-4214 Medium 6.1 Chained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via ip 0.8%
• CVE-2022-4215 Medium 6.1 Chained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via date 0.9%
• CVE-2022-4220 Medium 5.4 Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Question Deletion 0.4%
• CVE-2022-4219 Medium 5.4 Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Submitted Response Deletion 0.4%
• CVE-2022-4218 Medium 5.4 Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Arbitrary Quiz Deletion and Copying 0.5%