rocklobsterinc

Products

ProductCVEsExploitedLatest
Contact Form 73–Apr 16, 2025
Bogo1–Jun 19, 2026
Flamingo1–Sep 7, 2026

Exploited and recent CVEs

  • CVE-2026-12853 Medium 5.4 Flamingo <= 2.6.2 - Authenticated (Contributor+) Missing Authorization to Unauthorized Tag Information Disclosure via wp.getTerms and ajax-tag-search 0.4%
  • CVE-2026-9013 Medium 4.3 Bogo <= 3.9.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via REST API 0.4%
  • CVE-2025-3247 Medium 5.3 Contact Form 7 <= 6.0.5 - Order Replay Vulnerability 0.3%
  • CVE-2024-2242 Medium 6.1 Contact Form 7 <= 5.9 - Reflected Cross-Site Scripting 1.3%
  • CVE-2023-6449 Medium 6.6 Contact Form 7 <= 5.8.3 - Authenticated (Editor+) Arbitrary File Upload 1.8%