Pricing
Case studies
Login
Start trial
Ananda Dhakal (Patchstack)
Say thanks
0.00
XP
0
Reports
16
Reports, last 90 days
-
26 Aug, 2026
🇳🇵
Lvl 0
0
0
0
0
Website
X
GitHub
Sort by
Priority
Severity
Exploited
Search
Clear
Affected software | Vulnerability
CVE
AXP
Severity
Reported
WP Cafe Pro
< 3.0.15
Sensitive Data Exposure
N/A
7.5
01/07/2026
InfiniteWP Client
<= 1.13.9
SQL Injection
N/A
7.6
16/07/2026
WP Cafe Pro
< 3.0.15
Local File Inclusion
N/A
9.8
01/07/2026
WP Cafe Pro
< 3.0.15
Local File Inclusion
N/A
6.6
01/07/2026
OptionTree
<= 2.7.3
PHP Object Injection
N/A
7.2
06/07/2026
Slider by 10Web
<= 1.2.62
Cross Site Request Forgery (CSRF)
3.7
7.4
09/07/2026
Wise Chat
<= 3.4
Cross Site Scripting (XSS)
N/A
6.5
09/07/2026
Featured Video Plus
<= 2.3.3
Cross Site Scripting (XSS)
N/A
6.5
09/07/2026
Charitable
<= 1.8.11.3
Broken Access Control
15
7.5
09/07/2026
Frontend Admin by DynamiApps
<= 3.29.10
Cross Site Scripting (XSS)
N/A
6.5
09/07/2026
WPZOOM Forms – Contact Form Plugin for Gutenberg
<= 2.0.7
Cross Site Scripting (XSS)
N/A
6.5
09/07/2026
Login With Ajax
<= 4.5.1
Cross Site Scripting (XSS)
N/A
6.5
09/07/2026
Video Conferencing with Zoom
<= 4.6.8
Cross Site Scripting (XSS)
N/A
6.5
09/07/2026
Wufoo Shortcode
<= 1.55
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
Typing Effect
<= 1.3.7
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
Table Of Contents Block
<= 1.5.0
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
WP Tab Widget
<= 1.2.11
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
GeoDirectory
<= 2.8.177
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
RomethemeForm For Elementor
<= 1.2.6
Broken Access Control
N/A
4.3
14/07/2026
Gravity Booster – Styles & Layouts for Gravity Forms
<= 6.1
Broken Access Control
10.8
5.4
14/07/2026
WP Table Builder
<= 2.2.1
Broken Access Control
N/A
4.3
16/07/2026
3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery
<= 1.16.20
Sensitive Data Exposure
31.8
5.3
16/07/2026
Shortcodes and extra features for Phlox theme
<= 2.17.22
Sensitive Data Exposure
31.8
5.3
16/07/2026
Razorpay for WooCommerce
<= 4.8.7
Insecure Direct Object References (IDOR)
42.4
5.3
16/07/2026
MailChimp For WooCommerce
< 6.2
SQL Injection
N/A
7.6
16/07/2026
WP Data Access
<= 5.5.79
Cross Site Scripting (XSS)
N/A
5.9
13/07/2026
Gutenverse Companion
<= 2.5.1
Server Side Request Forgery (SSRF)
10.8
7.2
09/07/2026
Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK)
<= 1.0.7
Broken Access Control
N/A
7.5
09/07/2026
Advanced Custom Fields: Font Awesome Field
<= 6.1.2
Broken Access Control
N/A
4.3
06/07/2026
Theme My Login
<= 7.1.14
Cross Site Request Forgery (CSRF)
6.45
4.3
06/07/2026
Custom CSS and JavaScript
<= 2.0.16
Sensitive Data Exposure
10.6
5.3
08/07/2026
Export Import Menus
<= 1.9.2
Sensitive Data Exposure
10.6
5.3
08/07/2026
Featured Video Plus
<= 2.3.3
Sensitive Data Exposure
10.6
5.3
08/07/2026
Plugins Garbage Collector (Database Cleanup)
<= 0.14
Cross Site Request Forgery (CSRF)
3.25
6.5
08/07/2026
Subscribe to Comments
<= 2.3.1
Cross Site Scripting (XSS)
N/A
5.9
08/07/2026
Polylang Pro
<= 3.8.5
Sensitive Data Exposure
N/A
4.3
No date
WPBruiser {no- Captcha anti-Spam}
<= 3.1.43
PHP Object Injection
19.6
9.8
09/07/2026
Order Delivery Date for WooCommerce
<= 4.6.0
Privilege Escalation
N/A
7.2
09/07/2026
Simple Membership
<= 4.7.8
Broken Access Control
30
7.5
14/07/2026
Mercado Pago payments for WooCommerce
<= 8.9.0
Insecure Direct Object References (IDOR)
42.4
5.3
16/07/2026
FiboSearch
<= 1.33.0
Cross Site Scripting (XSS)
N/A
5.9
16/07/2026
Powerkit
<= 3.1.0
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
Advanced AJAX Product Filters
<= 3.2.0.3
Cross Site Scripting (XSS)
42.6
7.1
14/07/2026
JetFormBuilder
<= 3.6.4.1
Broken Access Control
51.75
7.5
02/07/2026
ShopLentor Pro
<= 2.8.5
Broken Access Control
7.95
5.3
01/07/2026
ShopLentor Pro
<= 2.8.5
Broken Access Control
3.22
4.3
01/07/2026
JetSearch
<= 3.6.1.2
Sensitive Data Exposure
12.19
5.3
02/07/2026
JetBlocks For Elementor
<= 1.5.0
Sensitive Data Exposure
36.57
5.3
02/07/2026
JetReviews
<= 3.0.1
Sensitive Data Exposure
9.14
5.3
02/07/2026
Auto Featured Image (Auto Post Thumbnail)
<= 5.0.4
Server Side Request Forgery (SSRF)
N/A
4.9
30/06/2026
User Profile Picture
<= 2.6.3
Insecure Direct Object References (IDOR)
N/A
2.7
30/06/2026
WP Maps
<= 4.9.6
Sensitive Data Exposure
12.9
4.3
16/07/2026
Spider Analyser – WordPress搜索引擎蜘蛛分析插件
<= 2.1.3
Remote Code Execution (RCE)
30
10
12/06/2026
Dokan
<= 5.0.10
Broken Access Control
N/A
5.3
14/07/2026
Profile Builder
<= 3.16.5
Broken Access Control
31.8
5.3
14/07/2026
MailOptin
<= 1.2.78.0
Cross Site Scripting (XSS)
N/A
6.5
09/07/2026
Export User Data
<= 2.2.6
PHP Object Injection
7.35
9.8
08/06/2026
Easy PayPal Buy Now Button
<= 2.0.4
Cross Site Scripting (XSS)
14.2
7.1
13/07/2026
Kali Forms
<= 2.4.18
Cross Site Scripting (XSS)
16.33
7.1
09/07/2026
Ad Invalid Click Protector (AICP)
<= 1.3.0
Broken Access Control
13
6.5
08/07/2026
Exclusive Addons Elementor
<= 2.8.0
Sensitive Data Exposure
31.8
5.3
14/07/2026
Easy Digital Downloads
<= 3.6.9
Arbitrary File Deletion
N/A
4.9
30/06/2026
Checkout Field Editor for WooCommerce – Checkout Manager
<= 3.0.5
Cross Site Scripting (XSS)
N/A
5.9
15/06/2026
Insert Headers and Footers Code – HT Script
<= 1.1.8
Cross Site Request Forgery (CSRF)
N/A
4.3
09/06/2026
Feedzy
<= 5.2.4
Server Side Request Forgery (SSRF)
N/A
4.9
14/07/2026
Photonic Gallery & Lightbox for Flickr, SmugMug & Others
<= 3.33
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
Location Weather
<= 3.0.6
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
WP Google Review Slider
<= 18.4
Cross Site Request Forgery (CSRF)
4.3
4.3
06/07/2026
WP Google Review Slider
<= 18.4
SQL Injection
N/A
7.6
06/07/2026
Kirki
<= 6.0.13
Arbitrary File Deletion
N/A
6.8
23/06/2026
ЮKassa для WooCommerce
<= 2.16.1
Sensitive Data Exposure
4.88
6.5
12/06/2026
Visual Composer Website Builder
<= 45.15.0
Broken Access Control
8.63
5
14/07/2026
Event Tickets
<= 5.29.0.1
Broken Access Control
36.57
5.3
16/07/2026
MapPress Maps for WordPress
<= 2.97.6
Sensitive Data Exposure
21.2
5.3
16/07/2026
Orbit Fox by ThemeIsle
<= 3.0.7
Cross Site Scripting (XSS)
N/A
5.9
16/07/2026
BetterDocs
<= 4.6.2
Cross Site Scripting (XSS)
N/A
6.5
14/07/2026
WordPress Social Login and Register
<= 7.8.0
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
AffiliateX
<= 2.3.5
Server Side Request Forgery (SSRF)
10.8
5.4
09/07/2026
Abandoned Cart Lite for WooCommerce
<= 6.8.0
Cross Site Scripting (XSS)
N/A
5.9
09/06/2026
Byteflows Travel & Hotel Booking
<= 1.0.0
Sensitive Data Exposure
N/A
7.5
09/07/2026
Paid Member Subscriptions
<= 3.0.7
Insecure Direct Object References (IDOR)
7.5
7.5
09/07/2026
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce
<= 2.10.22
SQL Injection
N/A
7.6
09/06/2026
Hide My WP Ghost
<= 7.0.06
Broken Authentication
29.6
7.4
16/07/2026
Kwayy HTML Sitemap
<= 4.0
Cross Site Request Forgery (CSRF)
2.66
7.1
15/06/2026
Machete
<= 5.2
Cross Site Scripting (XSS)
N/A
5.9
15/06/2026
Cyr to Lat reloaded – transliteration of links and file names
<= 1.3.3
Broken Access Control
N/A
4.3
15/06/2026
افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری)
<= 4.4.6
Cross Site Request Forgery (CSRF)
3.25
6.5
12/06/2026
TinyMCE Templates
<= 4.8.1
Sensitive Data Exposure
N/A
4.3
12/06/2026
Custom links in Elementor Image Carousel
<= 1.1.1
Cross Site Scripting (XSS)
N/A
5.9
12/06/2026
Smart SEO Tool
<= 4.1.2
Cross Site Scripting (XSS)
N/A
6.5
12/06/2026
Persian Woocommerce SMS
<= 7.2.2
SQL Injection
N/A
7.6
12/06/2026
Qubely
<= 1.8.14
Broken Access Control
N/A
4.8
12/06/2026
TemplateSpare
<= 4.2.2
Broken Access Control
N/A
4.3
10/06/2026
Graphina
<= 3.1.12
Broken Access Control
N/A
5.3
10/06/2026
LIQUID SPEECH BALLOON
<= 1.2.6
Cross Site Scripting (XSS)
N/A
6.5
08/06/2026
WP Social Ninja
<= 4.3.0
Sensitive Data Exposure
21.2
5.3
16/07/2026
Photo Gallery
<= 2.7.7.29
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
Accept Donations with PayPal & Stripe
<= 1.5.5
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
Appointment Hour Booking
<= 1.5.86
Cross Site Scripting (XSS)
N/A
6.5
09/07/2026
MP3 Audio Player for Music, Radio & Podcast by Sonaar
<= 5.12
Broken Access Control
N/A
5.3
10/06/2026
1
2
3
4
Report vulnerabilities to earn bounties and rewards!
Read more
Include pending
Back to top