Jason-Lau

3 CVEs in 3 Jason-Lau products, including Add User Meta, Hide It, User Meta Manager. Newest: CVE-2025-7688 (2025-08-15).

Jason-Lau products with known CVEs

ProductCVEs
Add User Meta1
Hide It1
User Meta Manager1
Jason-Lau CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-7688Medium6.12025-08-15The Add User Meta plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incor…
CVE-2025-5565Medium6.42025-06-06The Hide It plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'hideit' shortcode in all versions up to, and including, 1.0.1 d…
CVE-2023-22718High7.12023-04-23Reflected Cross-Site Scripting (XSS) vulnerability in Jason Lau User Meta Manager plugin <= 3.4.9 versions.