wordpresteem
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WE – Client Logo Carousel | 1 | – | Nov 19, 2024 |
| WE – Testimonial Slider | 1 | – | Jan 30, 2025 |
| WE Blocks | 1 | – | Jan 7, 2025 |
Exploited and recent CVEs
- CVE-2024-13460 WE – Testimonial Slider <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
- CVE-2025-22529 WordPress WE Blocks <= 1.3.5 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2024-51821 WordPress WE – Client Logo Carousel plugin <= 1.4 - Cross Site Scripting (XSS) vulnerability 0.4%