Hmplugin

Hmplugin is a niche WordPress plugin vendor whose vulnerability exposure concentrates in a small set of donation and user-role management plugins such as JobWP, AidWP, and HM Multiple Roles. Its disclosures skew strongly toward critical-severity outcomes and recur through weakness classes including cross-site request forgery, exposure of sensitive information, improper privilege management, and missing authorization—patterns typical of WordPress plugins that handle payment processing and user capabilities without adequate input validation or access controls. Current severity, exploitation, and exposure counts are shown alongside this summary.