GCVE - cpe:2.3:a:imaprogrammer:custom

Approved changes feed: RSS · Atom

cpe:2.3:a:imaprogrammer:custom_comment:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Imaprogrammer (`f00e012c-5302-5e5f-a83a-2059f5cd30f1`)
Product	Custom Comment (`dbae8b73-4f8f-5a1f-b45f-48dfe26e329a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-49889`	vulnerable	2026-06-08 07:29:15.057586	WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability HIGH (8.1) Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Edge CPT edge-cpt allows PHP Local File Inclusion.This issue affects Edge CPT: from n/a through <= 1.4. Published: 2025-08-20T08:03:38.918Z Updated: 2026-04-28T16:13:07.124Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/edge-cpt/vulnerability/wordpress-edge-cpt-plugin-1-4-local-file-inclusion-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-48365`	vulnerable	2026-06-08 07:27:15.744337	WordPress Custom Comment plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability MEDIUM (5.9) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imaprogrammer Custom Comment customcomment allows Stored XSS.This issue affects Custom Comment: from n/a through <= 2.1.6. Published: 2025-08-28T12:37:11.934Z Updated: 2026-04-28T16:12:57.573Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/customcomment/vulnerability/wordpress-custom-comment-plugin-2-1-6-cross-site-scripting-xss-vulnerability-2?_s_id=cve	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.