richardgabriel

Products

ProductCVEsExploitedLatest
Staff Directory Plugin: Company Directory3–Mar 5, 2025
Awesome Weather Widget1–Sep 14, 2023
Locations1–Jul 1, 2023
Reusable Text Blocks1–Oct 24, 2023

Exploited and recent CVEs

  • CVE-2024-13839 Medium 6.1 Company Directory <= 4.3 - Reflected Cross-Site Scripting via add_query_arg Function 0.3%
  • CVE-2025-25165 High 7.1 WordPress Staff Directory Plugin: Company Directory Plugin <= 4.3 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-5745 Medium 5.5 Reusable Text Blocks <= 1.5.3 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode 0.5%
  • CVE-2023-4944 Medium 6.4 Awesome Weather Widget <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.5%
  • CVE-2021-4397 Medium 4.3 Staff Directory Plugin <= 3.6 - Cross-Site Request Forgery Bypass 0.4%
  • CVE-2021-4394 Medium 4.3 Locations <= 3.2.1 - Cross-Site Request Forgery Bypass 0.5%