wpazleen
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Post Export Import with Media | 4 | – | Oct 17, 2026 |
| SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications | 2 | – | Oct 31, 2026 |
Exploited and recent CVEs
- CVE-2026-118235 SimpleForm <= 3.10.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename via Unknown File Key in simpleform_get_submit_data 0.7%
- CVE-2026-110268 Post Export Import with Media <= 1.17.2 - Authenticated (Administrator+) Path Traversal via 'theme_slug' Parameter 0.8%
- CVE-2026-104764 Post Export Import with Media <= 1.17.1 - Authenticated (Administrator+) PHP Object Injection via 'page_data[meta]' Parameter 0.6%
- CVE-2026-104748 SimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment via simpleform_wp_register 0.8%
- CVE-2026-104763 Post Export Import with Media <= 1.17.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'file_path' Parameter in media_metadata.json 0.7%
- CVE-2026-13430 Post Export Import with Media <= 1.13.1 - Authenticated (Administrator+) Arbitrary File Upload via Trailing-Dot Filename Bypass in ZIP Media Import 1.1%