Yyonifre

Products

Exploited and recent CVEs

• CVE-2026-28003 High 7.1 WordPress Maspik – Spam blacklist plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2025-60145 Medium 4.3 WordPress Lenix scss compiler Plugin <= 1.2 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
• CVE-2025-60144 Medium 5.9 WordPress Lenix scss compiler Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability 0.2%
• CVE-2025-9888 Medium 4.3 Maspik <= 2.5.6 - Cross-Site Request Forgery 0.2%
• CVE-2025-9979 Medium 4.3 Maspik <= 2.5.6 - Authenticated (Subscriber+) Missing Authorization to Spam Log Export 0.3%
• CVE-2025-1039 High 7.2 Lenix Elementor Leads addon <= 1.8.2 - Unauthenticated Stored Cross-Site Scripting via URL Form Field 0.4%
• CVE-2024-53806 Medium 5.4 WordPress Maspik plugin <= 2.2.7 - CSRF to Settings Change vulnerability 0.4%
• CVE-2023-48271 Medium 5.3 WordPress Maspik – Spam Blacklist plugin <= 0.10.3 - IP Filtering Bypass vulnerability 0.4%
• CVE-2024-25101 Medium 5.9 WordPress Maspik – Spam blacklist Plugin <= 0.10.6 is vulnerable to Cross Site Scripting (XSS) 0.4%
• CVE-2023-48272 High 7.1 WordPress Maspik – Spam blacklist Plugin <= 0.9.2 is vulnerable to Cross Site Scripting (XSS) 0.4%
• CVE-2023-24008 Medium 4.3 WordPress Maspik – Spam blacklist Plugin <= 0.7.8 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%