a3rev vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20241
3. 20255
4. 20261

Newest CVEs

• CVE-2026-6427

  a3 Lazy Load <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Element

  a3rev · a3 Lazy Load

  Medium6.4
• CVE-2025-9873

  a3 Lazy Load <= 2.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

  a3rev · a3 Lazy Load

  Medium6.4
• CVE-2025-5123

  Contact Us Page – Contact People <= 3.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via style Parameter

  a3rev · Contact Us Page – Contact People

  Medium6.4
• CVE-2025-2816

  Page View Count 2.8.0 - 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

  a3rev · Page View Count

  High8.1
• CVE-2024-12435

  Compare Products for WooCommerce <= 3.2.1 - Reflected Cross-Site Scripting

  a3rev · Compare Products for WooCommerce

  Medium6.1
• CVE-2024-12313

  Compare Products for WooCommerce <= 3.2.1 - Unauthenticated PHP Object Injection

  a3rev · Compare Products for WooCommerce

  High8.1
• CVE-2024-1807

  Product Sort and Display for WooCommerce <= 2.4.1 - Missing Authorization

  a3rev · Product Sort and Display for WooCommerce

  Medium6.5
• CVE-2019-25144

  WP HTML Mail < 2.2.11 - HTML injection

  a3rev · WP Email Template

  Medium5.4