EPC Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

ARForms2 vulnerabilities
Blog Designer PRO for WordPress1 vulnerability
Oshine Modules1 vulnerability
User Activity Log Pro1 vulnerability
Woffice1 vulnerability

EPC vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2025-47696HIGH	WordPress Blog Designer PRO plugin <= 3.4.7 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerability Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in solwin Blog Designer PRO blog-designer-pro.This issue affects Blog Designer PRO: from n/a through <= 3.4.7. CWE-98Aug 31, 2025	CVSS8.1v3.1	EPSS0.468%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2024-44055MEDIUM	WordPress Oshine Modules plugin < 3.3.6 - Unauthenticated Server Side Request Forgery (SSRF) vulnerability Server-Side Request Forgery (SSRF) vulnerability in brandexponents Oshine Modules oshine-modules.This issue affects Oshine Modules: from n/a through < 3.3.8. CWE-918Jan 31, 2025	CVSS5.4v3.1	EPSS0.251%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2024-37929MEDIUM	WordPress User Activity Log Pro plugin <= 2.3.4 - Subscriber+ Multiple Broken Access Control vulnerability Missing Authorization vulnerability in solwin User Activity Log Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Activity Log Pro: from n/a through 2.3.4. CWE-862Nov 1, 2024	CVSS6.3v3.1	EPSS0.35%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2024-43153CRITICAL	WordPress Woffice theme <= 5.4.10 - Unauthenticated Privilege Escalation vulnerability Incorrect Privilege Assignment vulnerability in WofficeIO Woffice woffice.This issue affects Woffice: from n/a through <= 5.4.10. CWE-266 CWE-269Aug 13, 2024	CVSS9.8v3.1	EPSS0.624%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2024-32702HIGH	WordPress ARForms plugin <= 6.4 - Reflected Cross Site Scripting (XSS) vulnerability Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4. CWE-79Apr 24, 2024	CVSS7.1v3.1	EPSS0.357%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2024-32706HIGH	WordPress ARForms plugin <= 6.4 - Subscriber+ SQL Injection vulnerability Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4. CWE-89Apr 24, 2024	CVSS8.5v3.1	EPSS0.565%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX