wbcomdesigns
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Wbcom Designs | 1 | – | Dec 9, 2025 |
| Wbcom Designs – BuddyPress Group Reviews | 1 | – | Jul 18, 2022 |
| Wbcom Designs – Custom Font Uploader | 1 | – | Jun 6, 2024 |
Exploited and recent CVEs
- CVE-2025-67582 WordPress Wbcom Designs plugin <= 2.1.1 - Broken Access Control vulnerability 0.2%
- CVE-2024-5489 Wbcom Designs - Custom Font Uploader <= 2.3.4 - Missing Authorization to Font Deletion 0.5%
- CVE-2022-2108 Wbcom Designs – BuddyPress Group Reviews <= 2.8.3 - Unauthorized AJAX Actions due to Nonce Bypass 0.9%