ST
Vendor
Stiofan
13
CVEs
0
On KEV
4
New 30D
Products
US7.1
UsersWP
Stiofan
5 CVEs0 on KEV2 new
GE8.8
GetPaid
Stiofan
3 CVEs0 on KEV1 new
BP7.1
BlockStrap Page Builder - Bootstrap Blocks
Stiofan
2 CVEs0 on KEV1 new
EC8.8
Events Calendar for GeoDirectory
Stiofan
2 CVEs0 on KEV0 new
AC4.3
AyeCode Connect
Stiofan
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115609 New | GE GetPaid Stiofan | 7.1 | Oct 28 | WordPress GetPaid plugin <= 2.8.62 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-94641 | US UsersWP Stiofan | 7.1 | Oct 9 | WordPress UsersWP plugin <= 1.2.73 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-94632 | BP BlockStrap Page Builder - Bootstrap Blocks Stiofan | 7.1 | Oct 9 | WordPress BlockStrap Page Builder - Bootstrap Blocks plugin <= 0.1.58 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-103086 | US UsersWP Stiofan | 6.5 | Oct 5 | WordPress UsersWP plugin <= 1.2.74 - Broken Access Control vulnerability |
| CVE-2026-39532 | EC Events Calendar for GeoDirectory Stiofan | 8.8 | Jun 15 | WordPress Events Calendar for GeoDirectory plugin <= 2.3.25 - PHP Object Injection vulnerability |
| CVE-2026-49064 | GE GetPaid Stiofan | 7.5 | Jun 15 | WordPress GetPaid plugin <= 2.8.49 - Sensitive Data Exposure vulnerability |
| CVE-2026-25015 | US UsersWP Stiofan | 4.3 | Feb 3 | WordPress UsersWP plugin <= 1.2.53 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2025-67593 | US UsersWP Stiofan | 4.3 | Dec 9 | WordPress UsersWP plugin <= 1.2.48 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2025-66072 | US UsersWP Stiofan | 5.3 | Nov 21 | WordPress UsersWP plugin <= 1.2.47 - Broken Access Control vulnerability |
| CVE-2025-30951 | BP BlockStrap Page Builder - Bootstrap Blocks Stiofan | 6.5 | Jun 6 | WordPress BlockStrap Page Builder - Bootstrap Blocks plugin <= 0.1.36 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-26967 | EC Events Calendar for GeoDirectory Stiofan | 8.8 | Mar 3 | WordPress Events Calendar for GeoDirectory plugin <= 2.3.14 - PHP Object Injection vulnerability |
| CVE-2024-56255 | AC AyeCode Connect Stiofan | 4.3 | Jan 2 | WordPress AyeCode Connect plugin <= 1.3.8 - Broken Access Control vulnerability |
| CVE-2024-43973 | GE GetPaid Stiofan | 8.8 | Nov 1 | WordPress GetPaid plugin <= 2.8.11 - Broken Access Control vulnerability |