shahinurislam

Products

ProductCVEsExploitedLatest
Career Section2–May 14, 2026
Meta-box GalleryMeta2–Jan 24, 2026

Exploited and recent CVEs

  • CVE-2026-6271 Critical 9.8 Career Section <= 1.7 - Unauthenticated Arbitrary File Upload 0.7%
  • CVE-2025-14868 High 8.8 Career Section <= 1.6 - Cross-Site Request Forgery to Arbitrary File Deletion 0.4%
  • CVE-2026-1302 Medium 4.4 Meta-box GalleryMeta <= 3.0.1 - Authenticated (Editor+) Stored Cross-Site Scripting via Image Caption 0.2%
  • CVE-2026-0687 Medium 4.3 Meta-box GalleryMeta <= 3.0.1 - Missing Authorization to Authenticated (Author+) Gallery Management 0.2%