DA
Vendor
damian-gora
5
CVEs
0
On KEV
1
New 30D
Products
FA6.4
FiboSearch – Ajax Search for WooCommerce
damian-gora
4 CVEs0 on KEV1 new
JG6.1
Justified Gallery
damian-gora
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-100106 | FA FiboSearch – Ajax Search for WooCommerce damian-gora | 6.4 | Oct 16 | FiboSearch <= 1.34.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'purchased_plan' Parameter |
| CVE-2024-13362 | JG Justified Gallery damian-gora | 6.1 | May 1 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter |
| CVE-2025-14298 | FA FiboSearch – Ajax Search for WooCommerce damian-gora | 5.4 | Dec 20 | FiboSearch – Ajax Search for WooCommerce <= 1.32.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via thegem_te_search Shortcode |
| CVE-2022-4974 | FA FiboSearch – Ajax Search for WooCommerce damian-gora | 6.3 | Oct 16 | Freemius SDK <= 2.4.2 - Missing Authorization Checks |
| CVE-2023-2450 | FA FiboSearch – Ajax Search for WooCommerce damian-gora | 4.4 | Jun 9 | The FiboSearch - AJAX Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.23.0 due to… |