wssoffice21

Products

ProductCVEsExploitedLatest
YMC Filter2–Oct 17, 2026
States Map US1–Dec 14, 2024

Exploited and recent CVEs

  • CVE-2026-109983 Medium 6.4 YMC Filter <= 3.12.19 - Authenticated (Author+) Stored DOM-Based Cross-Site Scripting via 'post_title' Parameter 0.2%
  • CVE-2025-10289 Medium 5.9 Filter & Grids <= 3.2.0 - Unauthenticated SQL Injection 0.3%
  • CVE-2024-12523 Medium 6.4 States Map US <= 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%