ThemeFarmer
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Ultimate Subscribe | 1 | – | Jan 22, 2025 |
| WooCommerce Tools | 1 | – | Jun 7, 2024 |
Exploited and recent CVEs
- CVE-2025-23806 WordPress Ultimate Subscribe Plugin <=1.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2024-1689 WooCommerce Tools <= 1.2.9 - Missing Authorization to Authenticated (Subscriber+) Plugin Module Deactivation 0.3%