wpdever
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Cart tracking for WooCommerce | 2 | – | May 7, 2025 |
| WP Notification Bell | 2 | – | May 1, 2026 |
| Target Notifications | 1 | – | Jan 7, 2025 |
Exploited and recent CVEs
- CVE-2024-13362 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
- CVE-2025-58821 WordPress WP Notification Bell plugin <= 1.4.6 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-47538 WordPress Cart tracking for WooCommerce plugin <= 1.0.17 - SQL Injection Vulnerability 0.5%
- CVE-2025-30791 WordPress Cart tracking for WooCommerce plugin <= 1.0.16 - SQL Injection Vulnerability 0.6%
- CVE-2025-22357 WordPress Target Notifications plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%