rahulbhangale

Products

ProductCVEsExploitedLatest
WP Promoter2–May 27, 2026
WP Emoticon Rating1–Jun 9, 2026
WP-Ultimate-Map1–Jun 9, 2026
WpMobi1–Jun 9, 2026

Exploited and recent CVEs

  • CVE-2026-8910 Medium 6.1 WP Emoticon Rating <= 1.0.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting via 'emo_settings' Parameter 0.1%
  • CVE-2026-8909 Medium 4.3 WpMobi <= 0.0.3 - Cross-Site Request Forgery via save_general_settings Action 0.1%
  • CVE-2026-8907 Medium 6.1 WP-Ultimate-Map <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'zoom-level' Parameter 0.1%
  • CVE-2026-8906 Medium 6.1 WP Promoter <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'popup_width' Parameter 0.1%
  • CVE-2026-9014 Medium 5.3 WP Promoter <= 1.3 - Missing Authorization to Unauthenticated Statistics Reset via wpp-reset_stats AJAX Action 0.3%