richardgabriel
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Staff Directory Plugin: Company Directory | 3 | – | Mar 5, 2025 |
| Awesome Weather Widget | 1 | – | Sep 14, 2023 |
| Locations | 1 | – | Jul 1, 2023 |
| Reusable Text Blocks | 1 | – | Oct 24, 2023 |
Exploited and recent CVEs
- CVE-2024-13839 Company Directory <= 4.3 - Reflected Cross-Site Scripting via add_query_arg Function 0.3%
- CVE-2025-25165 WordPress Staff Directory Plugin: Company Directory Plugin <= 4.3 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2023-5745 Reusable Text Blocks <= 1.5.3 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode 0.5%
- CVE-2023-4944 Awesome Weather Widget <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.5%
- CVE-2021-4397 Staff Directory Plugin <= 3.6 - Cross-Site Request Forgery Bypass 0.4%
- CVE-2021-4394 Locations <= 3.2.1 - Cross-Site Request Forgery Bypass 0.5%