WordPress plugin
Security Risk Profile
29
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 22, 2024 to present
4
Total CVEs
1
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
7.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
29/100
low
🆕 1Fresh (<7d)📈 2 in Last 30 Days
Severity Distribution
Critical
1High
0Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Infoleak
1
2
XSS
1
3
SQL Injection
1
Most Affected Products
1. WordPress plugin Extra Product Options Builder for WooCommerce1
2. WordPress plugin Quiz And Survey Master (QSM)1
3. WordPress plugin Logo Slider – Logo Carousel, Client Logo Slider & Brand Showcase for WordPress1
4. WordPress Plugin Country State City Dropdown CF71
Recent Vulnerabilities
See more →CVE-2026-19728
unknown
Extra Product Options Builder for WooCommerce < 1.2.176 - Unauthenticated Customer File Disclosure via getpublicfileupload
8/16/2026🔧 No Patch
CVE-2026-14820
CVSS 5.3medium
Quiz And Survey Master < 11.1.3 - Unauthenticated User Enumeration and Password Oracle via Quiz Login
7/27/2026🔧 No Patch
CVE-2026-13247
CVSS 6.4medium
Logo Slider <= 5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lgx_tooltip_position' Parameter
7/10/2026🔧 No Patch
CVE-2024-3495
CVSS 9.8critical
Country State City Dropdown CF7 <= 2.7.2 - Unauthenticated SQL Injection
5/22/2024🔧 No Patch
Monitor WordPress plugin in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.