wptipsntricks
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP Video Lightbox | 2 | – | Jul 3, 2025 |
| WordPress Simple Shopping Cart | 1 | – | Mar 16, 2023 |
Exploited and recent CVEs
- CVE-2025-2540 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via prettyPhoto JavaScript Library 0.3%
- CVE-2024-4324 WP Video Lightbox <= 1.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter 0.4%
- CVE-2023-1431 The WP Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.6.3 due to the plugin saving shopping cart data exports in a public 0.5%