SP
Vendor
specialk
11
CVEs
0
On KEV
0
New 30D
Products
US7.2
User Submitted Posts – Enable Users to Submit Posts from the Front End
specialk
3 CVEs0 on KEV0 new
SA7.2
Simple Ajax Chat – Add a Fast, Secure Chat Box
specialk
2 CVEs0 on KEV0 new
SD6.4
Simple Download Counter
specialk
2 CVEs0 on KEV0 new
BM5.3
Banhammer – Monitor Site Traffic, Block Bad Users and Bots
specialk
1 CVEs0 on KEV0 new
BF7.2
Blackhole for Bad Bots
specialk
1 CVEs0 on KEV0 new
HM6.4
Head Meta Data
specialk
1 CVEs0 on KEV0 new
PR7.2
Prismatic
specialk
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-81825 | SA Simple Ajax Chat – Add a Fast, Secure Chat Box specialk | 7.2 | Sep 11 | Simple Ajax Chat <= 20260811 - Unauthenticated Stored Cross-Site Scripting |
| CVE-2026-3876 | PR Prismatic specialk | 7.2 | Apr 16 | Prismatic <= 3.7.3 - Unauthenticated Stored Cross-Site Scripting via 'prismatic_encoded' Pseudo-Shortcode |
| CVE-2026-4278 | SD Simple Download Counter specialk | 6.4 | Mar 26 | Simple Download Counter <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Shortcode Attribute |
| CVE-2026-4329 | BF Blackhole for Bad Bots specialk | 7.2 | Mar 26 | Blackhole for Bad Bots <= 3.8 - Unauthenticated Stored Cross-Site Scripting via User-Agent HTTP Header |
| CVE-2026-2987 | SA Simple Ajax Chat – Add a Fast, Secure Chat Box specialk | 6.1 | Mar 12 | Simple Ajax Chat <= 20260217 - Unauthenticated Stored Cross-Site Scripting via 'c' |
| CVE-2026-2126 | US User Submitted Posts – Enable Users to Submit Posts from the Front End specialk | 5.3 | Feb 18 | User Submitted Posts <= 20260113 - Incorrect Authorization to Unauthenticated Category Restriction Bypass via 'user-submitted-category' Parameter |
| CVE-2026-0800 | US User Submitted Posts – Enable Users to Submit Posts from the Front End specialk | 7.2 | Jan 24 | User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20251210 - Unauthenticated Stored Cross-Site Scripting via Custom Field |
| CVE-2026-0608 | HM Head Meta Data specialk | 6.4 | Jan 20 | Head Meta Data <= 20251118 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta |
| CVE-2026-0913 | US User Submitted Posts – Enable Users to Submit Posts from the Front End specialk | 6.4 | Jan 16 | User Submitted Posts <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode |
| CVE-2025-13677 | SD Simple Download Counter specialk | 4.9 | Dec 10 | Simple Download Counter <= 2.2.2 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal |
| CVE-2025-10745 | BM Banhammer – Monitor Site Traffic, Block Bad Users and Bots specialk | 5.3 | Sep 26 | Banhammer – Monitor Site Traffic, Block Bad Users and Bots <= 3.4.8 - Unauthenticated Protection Mechanism Bypass |