thomstark
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| File Away | 2 | – | Mar 20, 2025 |
| Formidable Kinetic | 1 | – | May 27, 2026 |
Exploited and recent CVEs
- CVE-2026-8871 Formidable Kinetic <= 1.1.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.2%
- CVE-2025-2539 File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Read 1.7%
- CVE-2025-2512 File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated File Upload via upload Function 1.0%