stevehenty
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Drop Shadow Boxes | 2 | – | Nov 16, 2024 |
| WP Get Personal | 1 | – | Oct 16, 2024 |
Exploited and recent CVEs
- CVE-2024-10262 Drop Shadow Boxes <= 1.7.14 - Authenticated (Subscriber+) Arbitrary Shortcode Execution 0.6%
- CVE-2022-4974 Freemius SDK <= 2.4.2 - Missing Authorization Checks 0.4%
- CVE-2023-5469 Drop Shadow Boxes <= 1.7.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.5%