wpcreatix
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Media Sweep – WordPress Media Cleaner | 1 | – | Aug 25, 2026 |
| VidShop – Shoppable Videos for WooCommerce | 1 | – | Jan 28, 2026 |
Exploited and recent CVEs
- CVE-2026-77824 Media Sweep <= 1.1.3 - Authenticated (Administrator+) SQL Injection via 'fields' Parameter 0.5%
- CVE-2026-0702 VidShop – Shoppable Videos for WooCommerce <= 1.1.4 - Unauthenticated Time-Based SQL Injection via 'fields' 2.0%