PressTigers

Products

ProductCVEsExploitedLatest
Simple Job Board7–Oct 22, 2025
Simple Testimonials Showcase3–Oct 17, 2024
Simple Folio3–Jan 28, 2026
ZIP Code Based Content Protection2–Mar 7, 2026
Simple Event Planner (WordPress plugin)2–Mar 25, 2022
Simple Owl Carousel1–Mar 31, 2025
Simple Event Planner1–Oct 5, 2026
Universal Clocks1–Jul 13, 2026

Exploited and recent CVEs

  • CVE-2026-97257 High 8.8 WordPress Simple Event Planner plugin <= 1.5.7 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-57782 Medium 5.3 WordPress Universal Clocks plugin <= 1.2.0 - Broken Access Control vulnerability 0.3%
  • CVE-2025-14353 High 7.5 ZIP Code Based Content Protection <= 1.0.2 - Unauthenticated SQL Injection via 'zipcode' Parameter 0.4%
  • CVE-2025-14039 Medium 6.4 Simple Folio <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Client name' and 'Link' Meta Fields 0.3%
  • CVE-2025-64256 Medium 4.3 WordPress Simple Folio plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-12151 Medium 6.4 Simple Folio <= 1.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting 0.2%
  • CVE-2025-59579 High 7.5 WordPress Simple Job Board plugin <= 2.13.7 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2025-59008 High 7.6 WordPress ZIP Code Based Content Protection plugin <= 1.0.0 - SQL Injection vulnerability 0.3%
  • CVE-2025-31535 Medium 6.5 WordPress Simple Owl Carousel plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-47188 Medium 5.3 WordPress Simple Job Board plugin <= 2.10.5 - Broken Access Control vulnerability 0.5%
  • CVE-2024-49295 Medium 5.9 WordPress Simple Testimonials Showcase plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-7351 High 7.2 Simple Job Board <= 2.12.3 - Authenticated (Editor+) PHP Object Injection 0.6%
  • CVE-2024-32530 Medium 6.5 WordPress Simple Testimonials Showcase plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-1813 Critical 9.8 Simple Job Board <= 2.11.0 - Unauthenticated PHP Object Injection via Job Application Fields 1.2%
  • CVE-2024-0593 Medium 5.3 Simple Job Board <= 2.10.8 - Missing Authorization to Unauthenticated Information Disclosure 0.9%
  • CVE-2023-52122 Medium 4.3 WordPress Simple Job Board Plugin <= 2.10.6 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
  • CVE-2023-48283 Medium 4.3 WordPress Simple Testimonials Showcase Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
  • CVE-2023-29440 Medium 4.3 WordPress Simple Job Board Plugin <= 2.10.3 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2022-25612 Medium 4.1 WordPress Simple Event Planner plugin <= 1.5.4 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities 0.6%
  • CVE-2022-25611 Medium 4.1 WordPress Simple Event Planner plugin <= 1.5.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 0.6%