yudiz
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Easy Email Subscription | 3 | – | Nov 12, 2025 |
| WP Contact Form 7 DB Handler | 1 | – | May 28, 2026 |
| WP Replicate Post | 1 | – | Jun 9, 2023 |
Exploited and recent CVEs
- CVE-2026-6455 WP Contact Form 7 DB Handler <= 3.0 - Cross-Site Request Forgery to Arbitrary File Deletion via 'contact_form' Parameter 0.2%
- CVE-2025-11994 Easy Email Subscription <= 1.3 - Unauthenticated Stored Cross-Site Scripting 0.4%
- CVE-2025-10691 Easy Email Subscription <= 1.3 - Cross-Site Request Forgery to Arbitrary Subscriber Deletion 0.1%
- CVE-2025-10683 Easy Email Subscription <= 1.3 - Authenticated (Admin+) SQL Injection via uid 0.3%
- CVE-2023-2237 WP Replicate Post <= 4.0.2 - Authenticated (Contributor+) SQL Injection 0.8%