wssoffice21
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| YMC Filter | 2 | – | Oct 17, 2026 |
| States Map US | 1 | – | Dec 14, 2024 |
Exploited and recent CVEs
- CVE-2026-109983 YMC Filter <= 3.12.19 - Authenticated (Author+) Stored DOM-Based Cross-Site Scripting via 'post_title' Parameter 0.2%
- CVE-2025-10289 Filter & Grids <= 3.2.0 - Unauthenticated SQL Injection 0.3%
- CVE-2024-12523 States Map US <= 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%