XplodedThemes
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WPIDE – File Manager & Code Editor | 3 | – | Aug 6, 2026 |
| WPIDE – File Manager & Code Editor (WordPress plugin) | 2 | – | Sep 21, 2022 |
| XT Ajax Add To Cart for WooCommerce | 1 | – | Sep 24, 2024 |
| XT Floating Cart for WooCommerce | 1 | – | Nov 5, 2024 |
| XT Quick View for WooCommerce | 1 | – | May 1, 2026 |
| XT Variation Swatches for WooCommerce | 1 | – | May 1, 2026 |
Exploited and recent CVEs
- CVE-2026-66440 WordPress WPIDE – File Manager & Code Editor plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-57766 WordPress WPIDE – File Manager & Code Editor plugin <= 3.5.6 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2024-13362 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
- CVE-2024-13362 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
- CVE-2024-9178 XT Floating Cart for WooCommerce <= 2.8.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
- CVE-2024-9546 WPIDE <= 3.4.9 - Unauthenticated Full Path Dislcosure 0.5%
- CVE-2024-8716 XT Ajax Add To Cart for WooCommerce <= 1.1.2 - Reflected Cross-Site Scripting 0.5%
- CVE-2022-40217 WordPress WPide plugin <= 2.6 - Authenticated Arbitrary File Edit/Upload vulnerability 1.1%
- CVE-2022-35235 WordPress WPide plugin <= 2.6 - Authenticated Arbitrary File Read vulnerability 1.2%