wpdever

Products

ProductCVEsExploitedLatest
Cart tracking for WooCommerce2–May 7, 2025
WP Notification Bell2–May 1, 2026
Target Notifications1–Jan 7, 2025

Exploited and recent CVEs

  • CVE-2024-13362 Medium 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
  • CVE-2025-58821 Medium 5.9 WordPress WP Notification Bell plugin <= 1.4.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-47538 High 7.6 WordPress Cart tracking for WooCommerce plugin <= 1.0.17 - SQL Injection Vulnerability 0.5%
  • CVE-2025-30791 High 7.6 WordPress Cart tracking for WooCommerce plugin <= 1.0.16 - SQL Injection Vulnerability 0.6%
  • CVE-2025-22357 High 7.1 WordPress Target Notifications plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%