Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

Fullworks Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2024-13362`Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter	Exploitation statusNot known exploited	FixYes	Affected productAnti-Spam Protection – No API Key, GDPR Friendly	Published05/01/2026	SeverityMedium
`CVE-2026-39535`WordPress Display Eventbrite Events plugin <= 6.5.6 - Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Affected productDisplay Eventbrite Events	Published04/08/2026	SeverityMedium
`CVE-2025-27003`WordPress Quick Paypal Payments Plugin <= 5.7.46 - Cross Site Request Forgery (CSRF) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productQuick Paypal Payments	Published09/05/2025	SeverityMedium
`CVE-2025-4302`Stop User Enumeration < 1.7.3 - Protection Bypass	Exploitation statusPublic exploit	FixYes	Affected productStop User Enumeration	Published07/17/2025	SeverityMedium
`CVE-2025-48245`WordPress Quick Contact Form plugin <= 8.2.1 - Reflected Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productQuick Contact Form	Published05/23/2025	SeverityHigh
`CVE-2025-47510`WordPress Display Eventbrite Events plugin < 6.3 - Local File Inclusion Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productDisplay Eventbrite Events	Published05/07/2025	SeverityHigh
`CVE-2023-23975`WordPress Quick Event Manager plugin <= 9.7.4 - Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Affected productQuick Event Manager	Published12/09/2024	SeverityMedium
`CVE-2023-25035`WordPress Quick Contact Form plugin <= 8.0.3.1 - Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Affected productQuick Contact Form	Published12/09/2024	SeverityMedium
`CVE-2023-25714`WordPress Quick Paypal Payments plugin <= 5.7.25 - Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Affected productQuick Paypal Payments	Published12/09/2024	SeverityHigh
`CVE-2024-10621`Simple Shortcode for Google Maps <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Exploitation statusNot known exploited	FixYes	Affected productSimple Shortcode for Google Maps	Published11/08/2024	SeverityMedium
`CVE-2022-4974`Freemius SDK <= 2.4.2 - Missing Authorization Checks	Exploitation statusNot known exploited	FixYes	Affected productYASR – Yet Another Star Rating Plugin for WordPress	Published10/16/2024	SeverityMedium
`CVE-2023-23889`WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS)	Exploitation statusNot known exploited	FixYes	Affected productQuick Paypal Payments	Published04/25/2023	SeverityMedium
`CVE-2022-47608`WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)	Exploitation statusNot known exploited	FixYes	Affected productQuick Contact Form	Published04/25/2023	SeverityMedium
`CVE-2023-25713`WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS)	Exploitation statusNot known exploited	FixYes	Affected productQuick Paypal Payments	Published04/07/2023	SeverityHigh
`CVE-2023-25702`WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS)	Exploitation statusNot known exploited	FixYes	Affected productQuick Paypal Payments	Published04/07/2023	SeverityMedium
`CVE-2023-23885`WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)	Exploitation statusNot known exploited	FixYes	Affected productQuick Contact Form	Published04/07/2023	SeverityMedium
`CVE-2023-23979`WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Scripting (XSS)	Exploitation statusNot known exploited	FixYes	Affected productQuick Event Manager	Published04/06/2023	SeverityHigh
`CVE-2022-46863`WordPress Quick Event Manager Plugin <= 9.6.4 is vulnerable to Cross Site Scripting (XSS)	Exploitation statusNot known exploited	FixYes	Affected productQuick Event Manager	Published03/28/2023	SeverityMedium
`CVE-2023-23974`WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Request Forgery (CSRF)	Exploitation statusNot known exploited	FixYes	Affected productQuick Event Manager	Published03/01/2023	SeverityMedium
`CVE-2022-37339`WordPress Meet My Team plugin <= 2.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Affected productMeet My Team (WordPress plugin)	Published09/23/2022	SeverityMedium
`CVE-2021-24767`Redirect 404 Error Page to Homepage or Custom Page with Logs < 1.7.9 - Log Deletion via CSRF	Exploitation statusNot confirmed	FixYes	Affected productRedirect 404 Error Page to Homepage or Custom Page with Logs	Published11/08/2021	SeverityUnknown
`CVE-2017-18536`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published08/21/2019	SeverityUnknown
`CVE-2017-1000226`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published11/17/2017	SeverityUnknown