toddhalfpenny

Products

ProductCVEsExploitedLatest
Past Events Extension1–Oct 16, 2024
Widgets on Pages1–May 1, 2026

Exploited and recent CVEs

  • CVE-2024-13362 Medium 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
  • CVE-2022-4974 Medium 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks 0.4%