Log in Start free

webdevstudios

Products

ProductCVEsExploitedLatest
Automatic Featured Images from Videos2–Jan 23, 2026
Custom Post Type UI2–Dec 13, 2025
Constant Contact for WordPress1–Sep 9, 2025

Exploited and recent CVEs

  • CVE-2026-24535 Medium 4.3 WordPress Automatic Featured Images from Videos plugin <= 1.2.7 - Broken Access Control vulnerability 0.2%
  • CVE-2025-14056 Medium 4.4 Custom Post Type UI <= 1.18.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'label' Import Parameter 0.3%
  • CVE-2025-12826 Medium 4.8 Custom Post Type UI <= 1.18.0 - Missing Authorization to Unauthenticated (Previously Administrator+) Custom Post Type Modification 0.3%
  • CVE-2025-48101 High 8.8 WordPress Constant Contact for WordPress Plugin <= 4.1.1 - PHP Object Injection Vulnerability 0.3%
  • CVE-2025-31820 Medium 4.3 WordPress Automatic Featured Images from Videos plugin <= 1.2.4 - Broken Access Control vulnerability 0.3%