Log in Start free

thehp

Products

ProductCVEsExploitedLatest
AIO Contact2–Dec 9, 2024
Global DNS1–Aug 20, 2025

Exploited and recent CVEs

  • CVE-2025-53577 Critical 10.0 WordPress Global DNS Plugin <= 3.1.0 - Remote Code Execution (RCE) Vulnerability 0.4%
  • CVE-2024-54218 Medium 6.5 WordPress AIO Contact plugin <= 2.8.1 - Unauthenticated Plugin Settings Change vulnerability 0.3%
  • CVE-2024-54219 High 7.1 WordPress AIO Contact plugin <= 2.8.1 - Unauthenticated Site-Wide Cross Site Scripting (XSS) vulnerability 0.4%