solwininfotech
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Trash Duplicate and 301 Redirect | 2 | – | Dec 31, 2025 |
| Blog Designer | 1 | – | Sep 22, 2025 |
| Timeline Designer | 1 | – | Jan 7, 2025 |
| User Activity Log | 1 | – | Jan 7, 2026 |
| WP Social Stream Designer | 1 | – | Apr 9, 2025 |
Exploited and recent CVEs
- CVE-2025-11877 User Activity Log <= 2.2 - Unauthenticated Limited Options Update via Failed Login 0.4%
- CVE-2025-62122 WordPress Trash Duplicate and 301 Redirect plugin <= 1.9.1 - Broken Access Control vulnerability 0.3%
- CVE-2025-57990 WordPress Blog Designer Plugin <= 3.1.8 - Broken Access Control Vulnerability 0.3%
- CVE-2025-32677 WordPress WP Social Stream Designer plugin <= 1.3 - SQL Injection vulnerability 0.5%
- CVE-2024-13468 Trash Duplicate and 301 Redirect <= 1.9 - Missing Authorization to Unauthenticated Arbitrary Post Deletion 0.5%
- CVE-2024-11437 Timeline Designer <= 1.4 - Authenticated (Admin+) SQL Injection 0.5%