rtowebsites

Products

ProductCVEsExploitedLatest
AdminQuickbar2–Jan 24, 2026
Dynamic Conditions1–Feb 4, 2025
DynamicTags1–Jan 7, 2025
PostGallery1–Dec 4, 2025

Exploited and recent CVEs

  • CVE-2025-14630 Medium 4.3 AdminQuickbar <= 1.9.3 - Cross-Site Request Forgery to Settings Update 0.2%
  • CVE-2025-13543 High 8.8 PostGallery <= 1.12.5 - Authenticated (Subscriber+) Arbitrary File Upload 0.8%
  • CVE-2025-39464 High 7.1 WordPress AdminQuickbar plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-22642 Medium 6.5 WordPress Dynamic Conditions plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-22348 High 8.5 WordPress DynamicTags plugin <= 1.4.0 - SQL Injection vulnerability 0.4%