DA
Vendor
davidanderson
21
CVEs
0
On KEV
4
New 30D
Products
RF7.2
Redux Framework
davidanderson
8 CVEs0 on KEV3 new
EV7.2
European VAT Compliance Assistant for WooCommerce
davidanderson
1 CVEs0 on KEV1 new
UW8.8
UpdraftPlus: WP Backup & Migration Plugin
davidanderson
4 CVEs0 on KEV0 new
AS7.2
All-In-One Security (AIOS) – Security and Firewall
davidanderson
2 CVEs0 on KEV0 new
WC8.1
WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance
davidanderson
2 CVEs0 on KEV0 new
EU6.1
Easy Updates Manager
davidanderson
1 CVEs0 on KEV0 new
IL4.8
Internal Link Juicer: SEO Auto Linker for WordPress
davidanderson
1 CVEs0 on KEV0 new
TS6.4
Testimonial Slider
davidanderson
1 CVEs0 on KEV0 new
WA5.5
WPGet API – Connect to any external REST API
davidanderson
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-100316 | EV European VAT Compliance Assistant for WooCommerce davidanderson | 7.2 | Oct 17 | European VAT Compliance Assistant for WooCommerce <= 1.36.10 - Unauthenticated Stored Cross-Site Scripting via CF-IPCountry Header |
| CVE-2025-14123 | RF Redux Framework davidanderson | 6.8 | Oct 9 | Redux Framework <= 4.5.11 – Authenticated (Subscriber+) Privilege Escalation via Users Extension |
| CVE-2026-90992 | RF Redux Framework davidanderson | 6.4 | Oct 1 | Redux Framework <= 4.5.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'user-mediaurl' Media Field |
| CVE-2026-88999 | RF Redux Framework davidanderson | 4.3 | Oct 1 | Redux Framework <= 4.5.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion via 'attachment_id' Parameter |
| CVE-2026-5410 | RF Redux Framework davidanderson | 6.4 | Sep 19 | Redux Framework <= 4.5.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Spinner Field Input |
| CVE-2026-5400 | RF Redux Framework davidanderson | 6.4 | Sep 19 | Redux Framework <= 4.5.13 - Authenticated (Subscriber+) Cross-Site Scripting via User Input |
| CVE-2026-5399 | RF Redux Framework davidanderson | 6.4 | Sep 10 | Redux Framework <= 4.5.13.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Slider Field Value |
| CVE-2026-10795 | UW UpdraftPlus: WP Backup & Migration Plugin davidanderson | 8.1 | Jun 11 | UpdraftPlus: WP Backup & Migration Plugin <= 1.26.4 - Unauthenticated Authentication Bypass via UpdraftCentral udrpc |
| CVE-2026-8438 | AS All-In-One Security (AIOS) – Security and Firewall davidanderson | 7.2 | Jun 6 | All-In-One Security (AIOS) <= 5.4.7 - Unauthenticated Stored Cross-Site Scripting via REST API Request Path |
| CVE-2026-7660 | EU Easy Updates Manager davidanderson | 6.1 | May 28 | Easy Updates Manager <= 9.0.20 - Reflected Cross-Site Scripting via 'paged' Parameter |
| CVE-2026-7252 | WC WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance davidanderson | 8.1 | May 7 | WP-Optimize <= 4.5.2 - Authenticated (Author+) Arbitrary File Deletion via 'original-file' Post Meta |
| CVE-2026-2712 | WC WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance davidanderson | 5.4 | Apr 10 | WP-Optimize <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update and Image Manipulation |
| CVE-2025-9488 | RF Redux Framework davidanderson | 6.4 | Dec 13 | Redux Framework <= 4.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via data Parameter |
| CVE-2024-13857 | WA WPGet API – Connect to any external REST API davidanderson | 5.5 | Mar 7 | WPGet API <= 2.2.10 - Authenticated (Administrator+) Server-Side Request Forgery |
| CVE-2025-0215 | UW UpdraftPlus: WP Backup & Migration Plugin davidanderson | 6.1 | Jan 15 | UpdraftPlus - Backup/Restore <= 1.24.12 - Reflected Cross-Site Scripting |
| CVE-2024-10957 | UW UpdraftPlus: WP Backup & Migration Plugin davidanderson | 8.8 | Jan 4 | UpdraftPlus: WP Backup & Migration Plugin 1.23.8 - 1.24.11 - Unauthenticated PHP Object Injection |
| CVE-2024-6828 | RF Redux Framework davidanderson | 7.2 | Jul 23 | Redux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting |
| CVE-2024-4193 | TS Testimonial Slider davidanderson | 6.4 | May 9 | Testimonial Slider <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-0657 | IL Internal Link Juicer: SEO Auto Linker for WordPress davidanderson | 4.8 | Feb 9 | Internal Link Juicer <= 2.23.4 - Authenticated (Admin+) Stored Cross-Site Scripting |
| CVE-2024-1037 | AS All-In-One Security (AIOS) – Security and Firewall davidanderson | 6.1 | Feb 7 | All-In-One Security (AIOS) – Security and Firewall <= 5.2.5 - Reflected Cross-Site Scripting |
| CVE-2023-5982 | UW UpdraftPlus: WP Backup & Migration Plugin davidanderson | 5.4 | Nov 7 | UpdraftPlus <= 1.23.10 - Cross-Site Request Forgery to Google Drive Storage Update |