yehudah

Products

ProductCVEsExploitedLatest
faq shortocde1–May 27, 2026
xmlrpc attacks blocker1–Feb 19, 2026

Exploited and recent CVEs

  • CVE-2026-8040 Medium 6.4 faq shortocde <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute 0.2%
  • CVE-2026-2502 Medium 6.1 xmlrpc attacks blocker <= 1.0 - Unauthenticated Stored Cross-Site Scripting via 'X-Forwarded-For' 0.3%