tobias_conrad
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms | 2 | – | May 1, 2026 |
| WebinarIgnition – Live, Automated & Evergreen Webinars for WooCommerce | 1 | – | Jul 24, 2025 |
| WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden | 1 | – | Oct 31, 2026 |
Exploited and recent CVEs
- CVE-2025-9462 WP2LEADS <= 3.5.6 - Authenticated (Subscriber+) SQL Injection via order Parameter 0.3%
- CVE-2024-13362 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
- CVE-2025-6441 Webinar Solution: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition <= 4.03.32 - Unauthenticated Login Token Generation to Authentication Bypass 1.1%
- CVE-2024-12419 Design for Contact Form 7 Style WordPress Plugin – CF7 WOW Styler <= 1.7.1 - Unauthenticated Arbitrary Shortcode Execution and Reflected Cross-Site Scripting 0.5%