infosatech vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20263

Newest CVEs

• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2025-14608

  WP Last Modified Info <= 1.9.5 - Insecure Direct Object Reference to Authenticated (Author+) Post Metadata Modification

  infosatech · WP Last Modified Info

  Medium5.3
• CVE-2025-14172

  WP Page Permalink Extension <= 1.5.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Rewrite Rules Flush

  infosatech · WP Page Permalink Extension

  Medium6.5
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3
• CVE-2024-6864

  WP Last Modified Info <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via lmt-post-modified-info Shortcode

  infosatech · WP Last Modified Info

  Medium6.4
• CVE-2024-1844

  RevivePress – Keep your Old Content Evergreen <= 1.5.6 - Missing Authorization

  infosatech · RevivePress – Keep your Old Content Evergreen

  Medium4.3