Venutius
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| BP Profile Shortcodes Extra | 3 | – | Jan 9, 2025 |
Exploited and recent CVEs
- CVE-2025-22817 WordPress BP Profile Shortcodes Extra plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2024-11732 BP Profile Shortcodes Extra <= 2.6.0 - Authenticated (Contributor+) SQL Injection via tab Parameter 0.4%
- CVE-2023-47815 WordPress BP Profile Shortcodes Extra Plugin <= 2.5.2 is vulnerable to Cross Site Scripting (XSS) 0.4%