switcorp

Products

ProductCVEsExploitedLatest
Activity Log for WordPress1–Feb 12, 2026
Profiler – What Slowing Down Your WP1–Jun 7, 2025
WP Sessions Time Monitoring Full Automatic1–Oct 16, 2026

Exploited and recent CVEs

  • CVE-2026-107648 High 7.2 WP Sessions Time Monitoring Full Automatic <= 1.1.5 - Unauthenticated Stored Cross-Site Scripting via 'action' GET Parameter 0.2%
  • CVE-2026-1671 Medium 6.5 Activity Log for WordPress <= 1.2.8 - Missing Authorization to Sensitive Information Exposure via Log File 0.3%
  • CVE-2025-5814 Medium 5.3 Profiler – What Slowing Down Your WP <= 1.0.0 - Missing Authentication to Unauthenticated Arbitrary Plugin Reactivation via State Restoration 0.3%