Rico Macchi

Products

ProductCVEsExploitedLatest
WP Links Page3–Oct 11, 2025
WP Scraper2–Oct 11, 2025
WP Featured Screenshot1–Apr 17, 2025

Exploited and recent CVEs

  • CVE-2025-10175 Medium 6.5 WP Links Page <= 4.9.6 - Authenticated (Subscriber+) SQL Injection 0.4%
  • CVE-2025-9975 Medium 6.8 WP Scraper <= 5.8.1 - Authenticated (Administrator+) Server-Side Request Forgery 0.3%
  • CVE-2025-30998 High 8.5 WordPress WP Links Page plugin <= 4.9.6 - SQL Injection vulnerability 0.3%
  • CVE-2025-32557 High 7.1 WordPress WP Featured Screenshot Plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-6465 Medium 4.3 WP Links Page <= 4.9.5 - Missing Authorization to Authenticated (Subscriber+) Limited Image Update 0.4%
  • CVE-2024-3663 Medium 4.3 WP Scraper <= 5.7 - Missing Authorization to Arbitrary Page/Post Creation 0.3%