Surbma
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| HuCommerce | Magyar kiegészítések WooCommerce webáruházakhoz | 1 | – | Oct 16, 2024 |
| Surbma | Booking.com Shortcode | 1 | – | Apr 14, 2026 |
| Surbma | Font Awesome | 1 | – | Nov 19, 2024 |
| Surbma | GDPR Proof Cookie Consent & Notice Bar | 1 | – | May 8, 2023 |
| Surbma | Infusionsoft Shortcode | 1 | – | Jun 27, 2026 |
| Surbma | MiniCRM Shortcode | 1 | – | Nov 21, 2025 |
| Surbma | Premium WP | 1 | – | Jan 9, 2025 |
| Surbma | Recent Comments Shortcode | 1 | – | Aug 16, 2025 |
| Surbma | SalesAutopilot Shortcode | 1 | – | Dec 12, 2024 |
| Surbma | Yoast SEO Breadcrumb Shortcode | 1 | – | Jul 2, 2026 |
Exploited and recent CVEs
- CVE-2026-57764 WordPress Surbma | Yoast SEO Breadcrumb Shortcode plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-11597 Surbma | Infusionsoft Shortcode <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.3%
- CVE-2026-1607 Surbma | Booking.com <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.2%
- CVE-2025-11800 Surbma | MiniCRM Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
- CVE-2025-7649 Surbma | Recent Comments Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
- CVE-2025-22808 WordPress Surbma | Premium WP plugin <= 9.0 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2024-11433 Surbma | SalesAutopilot Shortcode <= 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
- CVE-2024-51798 WordPress Surbma | Font Awesome plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2022-4974 Freemius SDK <= 2.4.2 - Missing Authorization Checks 0.4%
- CVE-2023-23894 WordPress Surbma | GDPR Proof Cookie Consent & Notice Bar Plugin <= 17.5.3 is vulnerable to Cross Site Scripting (XSS) 0.4%