SeedProd records

8 published records for vendor seedprod.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 37.5%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2024-1072No exploit	Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.15.21 - Missing Authorization via seedprod_lite_new_lseedprod · website builder by seedprod · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.6%	Feb 5, 2024
25Monitor	CVE-2024-4745No exploit	WordPress Giveaways and Contests by RafflePress plugin <= 1.12.4 - Broken Access Control vulnerabilityseedprod · rafflepress · CWE-862 Broken access control (IDOR)	Medium6.3	—	0.2%	Jun 10, 2024
22Monitor	CVE-2020-15038Proof of concept	The SeedProd coming-soon plugin before 5.1.1 for WordPress allows XSS.seedprod · coming soon page\, under construction \& maintenance mode · CWE-79 XSS	Medium5.4	—	3.7%	Jun 24, 2020
21Monitor	CVE-2023-5049No exploit	Giveaways and Contests by RafflePress <= 1.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeseedprod · rafflepress · CWE-79 XSS	Medium5.4	—	0.4%	Oct 30, 2023
19Monitor	CVE-2024-6887No exploit	Giveaways and Contests by RafflePress < 1.12.16 - Editor+ Stored XSSseedprod · rafflepress · CWE-79 XSS	Medium4.8	—	0.3%	Sep 12, 2024
19Monitor	CVE-2024-10107No exploit	Giveaways and Contests by RafflePress < 1.12.17 - Admin+ Stored XSSseedprod · rafflepress · CWE-79 XSS	Medium4.8	—	0.3%	May 15, 2025
19Monitor	CVE-2024-37556No exploit	WordPress WordPress Notification Bar plugin <= 1.3.10 - Cross Site Scripting (XSS) vulnerabilityseedprod · wordpress notification bar · CWE-79 XSS	Medium4.8	—	0.2%	Jul 21, 2024
17Monitor	CVE-2023-4975No exploit	Website Builder by SeedProd <= 6.15.13.1 - Cross-Site Request Forgery to Settings Updateseedprod · website builder by seedprod · CWE-352 Pre-auth CSRF	Medium4.3	—	0.3%	Oct 20, 2023

CVE-2024-1072
30Monitor
Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.15.21 - Missing Authorization via seedprod_lite_new_l
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
seedprod · website builder by seedprodFeb 5, 2024
CVE-2024-4745
25Monitor
WordPress Giveaways and Contests by RafflePress plugin <= 1.12.4 - Broken Access Control vulnerability
MediumCVSS 6.3No exploitEPSS 0%
- Broken access control (IDOR)
seedprod · rafflepressJun 10, 2024
CVE-2020-15038
22Monitor
The SeedProd coming-soon plugin before 5.1.1 for WordPress allows XSS.
MediumCVSS 5.4Proof of conceptEPSS 3%
- XSS
seedprod · coming soon page\, under construction \& maintenance modeJun 24, 2020
CVE-2023-5049
21Monitor
Giveaways and Contests by RafflePress <= 1.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MediumCVSS 5.4No exploitEPSS 0%
- XSS
seedprod · rafflepressOct 30, 2023
CVE-2024-6887
19Monitor
Giveaways and Contests by RafflePress < 1.12.16 - Editor+ Stored XSS
MediumCVSS 4.8No exploitEPSS 0%
- XSS
seedprod · rafflepressSep 12, 2024
CVE-2024-10107
19Monitor
Giveaways and Contests by RafflePress < 1.12.17 - Admin+ Stored XSS
MediumCVSS 4.8No exploitEPSS 0%
- XSS
seedprod · rafflepressMay 15, 2025
CVE-2024-37556
19Monitor
WordPress WordPress Notification Bar plugin <= 1.3.10 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 4.8No exploitEPSS 0%
- XSS
seedprod · wordpress notification barJul 21, 2024
CVE-2023-4975
17Monitor
Website Builder by SeedProd <= 6.15.13.1 - Cross-Site Request Forgery to Settings Update
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
seedprod · website builder by seedprodOct 20, 2023