“cve”
13 repositories, including 12 with fewer than two releases. Show released plugins only
A security-hardened fork of "Simply Show Hooks". Replaces the compromised original (CVE-2024-6297) and patches unlisted Cross-Site Scripting (XSS) vulnerabilities.
Cvent ACF Fields for WordPress
WordPress-plugin: bevakar core, plugins, teman och beroenden mot kända sårbarheter (CVSS/CVE) och mejlar rapport
Hotfix for file deletion to to code execution vulnerability in WordPress
Read-only-by-default WordPress incident-response scanner for the “wp2shell” attack chain (CVE-2026-60137 / CVE-2026-63030): detects shadow-admin, database and filesystem IOCs, verifies core integrity, and exports evidence. Optional controlled account cleanup; does not remove malware.
Wordpress Plugin that checks if your PHP Version is patched against CVE-2026-109618 / CVE-2026-109619
Secure fork of Startklar Elementor Addons. Patched CVE-2024-5153 & File Upload vulnerabilities.
A security-hardened fork of Crowdsignal Forms. Patches CVE-2025-69015 (Broken Access Control), modernizes for PHP 8.2+, and enforces strict authorization checks.
WooCommerce plugin: photo & video product reviews, closing CVE-2026-12684's unauthenticated-upload vulnerability class by construction
WooCommerce plugin: safe formula-based product pricing, closing CVE-2026-4001's eval()-based RCE
Sell bookable services and appointments through WooCommerce -- closes CVE-2026-2931 by construction.
A WordPress plugin exposing an MCP server over the REST API, with the security model as the point -- closes the CVE-2026-15015 OAuth-bypass shape by never having that surface at all.