johska

6,053.64

XP

308

Reports

0

Reports, last 90 days

#59

23 Oct, 2026
🇦🇹
Lvl 8
0
1
1
0
Website
X
GitHub
Affected software | Vulnerability
CVE
AXP
Severity
Reported
ZenSoul<= 1.13
PHP Object Injection
19.6
9.8
09/02/2026
Save Life<= 1.2.14
PHP Object Injection
45.08
9.8
09/02/2026
Ozisti<= 1.1.10
PHP Object Injection
45.08
9.8
09/02/2026
Preservation<= 1.15
PHP Object Injection
19.6
9.8
09/02/2026
Printy<= 1.13.0
PHP Object Injection
45.08
9.8
09/02/2026
Quirky<= 1.23
PHP Object Injection
19.6
9.8
09/02/2026
RexCoin<= 1.2.6
PHP Object Injection
45.08
9.8
09/02/2026
Edge Decor<= 2.9
PHP Object Injection
45.08
9.8
09/02/2026
EmojiNation<= 1.0.12
PHP Object Injection
45.08
9.8
09/02/2026
Gamezone<= 1.1.11
PHP Object Injection
45.08
9.8
09/02/2026
Avventure<= 1.1.12
PHP Object Injection
45.08
9.8
09/02/2026
Bonbon<= 1.11
PHP Object Injection
45.08
9.8
09/02/2026
Coinpress<= 1.0.15
PHP Object Injection
45.08
9.8
09/02/2026
Gamic<= 1.19
PHP Object Injection
19.6
9.8
09/02/2026
Good Homes<= 1.3.13
PHP Object Injection
19.6
9.8
09/02/2026
Gunslinger<= 1.11
PHP Object Injection
19.6
9.8
09/02/2026
Legal Stone<= 1.2.11
PHP Object Injection
45.08
9.8
09/02/2026
Le Truffe<= 1.1.7
PHP Object Injection
45.08
9.8
09/02/2026
Marcell<= 1.2.14
PHP Object Injection
45.08
9.8
09/02/2026
Meals & Wheels<= 1.1.13
PHP Object Injection
45.08
9.8
09/02/2026
Orpheus<= 1.8
PHP Object Injection
19.6
9.8
09/02/2026
Filmax<= 1.1.11
PHP Object Injection
45.08
9.8
09/02/2026
Mission<= 1.22
PHP Object Injection
19.6
9.8
09/02/2026
Motorix<= 1.11
PHP Object Injection
45.08
9.8
09/02/2026
Muzicon<= 1.15
PHP Object Injection
45.08
9.8
09/02/2026
Nuts<= 1.12
PHP Object Injection
45.08
9.8
09/02/2026
Splendour<= 1.23
PHP Object Injection
19.6
9.8
09/02/2026
Stargaze<= 1.10
PHP Object Injection
45.08
9.8
09/02/2026
Tipsy<= 1.6
PHP Object Injection
19.6
9.8
09/02/2026
Wine House<= 3.20
PHP Object Injection
39.2
9.8
09/02/2026
Yacht Rental<= 2.6
PHP Object Injection
45.08
9.8
09/02/2026
WineShop<= 3.20
PHP Object Injection
39.2
9.8
08/02/2026
Equadio<= 1.1.4
PHP Object Injection
45.08
9.8
07/02/2026
Juno<= 2.25
PHP Object Injection
45.08
9.8
07/02/2026
N7 | Golf Club Sports & Events<= 2.21
PHP Object Injection
45.08
9.8
08/02/2026
Invetex<= 2.18
PHP Object Injection
45.08
9.8
08/02/2026
Law Office<= 3.20
PHP Object Injection
45.08
9.8
08/02/2026
Asia Garden<= 1.3.1
PHP Object Injection
45.08
9.8
09/02/2026
Super Video Player<= 1.8.14
PHP Object Injection
16.56
7.2
23/01/2026
WP2LEADS<= 3.5.7
SQL Injection
39.1
8.5
25/12/2025
WP2LEADS<= 3.5.7
Broken Access Control
16.33
7.1
25/12/2025
Maps Marker Pro<= 4.32
SQL Injection
18.6
9.3
02/08/2026
Cwicly<= 1.4.4
Remote Code Execution (RCE)
16.71
9.9
17/01/2026
Abelle<= 1.22
PHP Object Injection
19.6
9.8
20/02/2026
Element Pack Elementor Addons<= 8.7.13
Bypass Vulnerability
97.52
5.3
06/01/2026
Breakdance< 2.7
Broken Access Control
15
7.5
17/01/2026
MapSVG<= 8.14.0
Cross Site Scripting (XSS)
11.21
6.5
15/01/2026
WpBookingly<= 1.2.9
Broken Access Control
7.42
4.3
22/12/2025
WpTravelly<= 2.1.5
Broken Access Control
10.87
6.3
04/12/2025
Five Star Restaurant Reservations<= 2.7.9
Broken Access Control
14.95
6.5
05/01/2026
File Uploader for WooCommerce<= 1.0.5
Path Traversal
15
7.5
31/12/2025
KiviCare<= 3.6.16
Cross Site Scripting (XSS)
16.33
7.1
20/01/2026
RSFirewall!<= 1.1.45
Cross Site Scripting (XSS)
14.2
7.1
10/01/2026
WP Telegram Widget and Join Link<= 2.2.13
Cross Site Scripting (XSS)
32.66
7.1
10/01/2026
VikRestaurants<= 1.5.2
Cross Site Scripting (XSS)
32.66
7.1
04/01/2026
Contact Manager<= 9.1
Cross Site Scripting (XSS)
7.1
7.1
22/01/2026
WpEvently<= 5.1.4
Cross Site Scripting (XSS)
32.66
7.1
16/01/2026
Bit SMTP<= 1.2.2
Broken Authentication
62.1
9
23/01/2026
Print Invoice & Delivery Notes for WooCommerce<= 5.9.0
Broken Access Control
30
7.5
27/12/2025
Automated FedEx live/manual rates with shipping labels<= 5.1.11
Broken Access Control
14.6
7.3
19/12/2025
Directorist<= 8.5.10
Broken Access Control
10.6
5.3
23/01/2026
MP3 Audio Player for Music, Radio & Podcast by Sonaar<= 5.11
Server Side Request Forgery (SSRF)
10.8
5.4
16/01/2026
Icon List Block<= 1.2.3
Cross Site Scripting (XSS)
11.21
6.5
16/01/2026
Passster<= 4.2.25
Broken Access Control
11.21
6.5
13/01/2026
PublishPress Authors<= 4.10.1
Broken Access Control
7.42
4.3
07/01/2026
Modula Image Gallery<= 2.13.4
Cross Site Scripting (XSS)
27.14
5.9
05/01/2026
Quiz And Survey Master<= 10.3.4
Insecure Direct Object References (IDOR)
48.76
5.3
02/01/2026
Gallery PhotoBlocks<= 1.3.2
Cross Site Scripting (XSS)
11.21
6.5
27/12/2025
ABG Rich Pins<= 1.1
Cross Site Scripting (XSS)
4.88
6.5
23/12/2025
Advanced iFrame<= 2025.10
Cross Site Scripting (XSS)
14.63
6.5
20/12/2025
RIS Version Switcher &#8211; Downgrade or Upgrade WP Versions Easily<= 1.2
Cross Site Request Forgery (CSRF)
1.63
6.5
08/07/2025
Yahoo! WebPlayer<= 2.0.6
Cross Site Scripting (XSS)
7.1
7.1
22/05/2025
re.place<= 0.2.1
Cross Site Request Forgery (CSRF)
1.78
7.1
22/05/2025
Track Everything<= 2.0.1
Cross Site Request Forgery (CSRF)
1.78
7.1
27/05/2025
RSS Digest<= 1.5
Cross Site Request Forgery (CSRF)
1.78
7.1
22/05/2025
Społecznościowa 6 PL 2013<= 2.0.6
Cross Site Request Forgery (CSRF)
1.78
7.1
22/05/2025
WP2LEADS<= 3.5.0
Cross Site Scripting (XSS)
16.33
7.1
16/05/2025
BP Profile as Homepage<= 1.1
Cross Site Request Forgery (CSRF)
3.55
7.1
23/04/2025
Affiliates Manager Google reCAPTCHA Integration<= 1.0.6
Cross Site Request Forgery (CSRF)
2.66
7.1
09/05/2025
Aptivada for WP<= 2.0.0
Cross Site Scripting (XSS)
N/A
6.5
15/04/2025
ShayanWeb Admin FontChanger<= 1.9.1
Cross Site Request Forgery (CSRF)
3.55
7.1
11/04/2025
WP2LEADS<= 3.5.0
Cross Site Request Forgery (CSRF)
4.08
7.1
19/04/2025
Supertext Translation and Proofreading<= 4.26
Cross Site Request Forgery (CSRF)
3.55
7.1
31/03/2025
Martins Free Monetized Ad Exchange Network<= 1.0.11
Cross Site Request Forgery (CSRF)
3.55
7.1
03/04/2025
WP DPE-GES<= 1.6
Cross Site Scripting (XSS)
4.88
6.5
24/04/2025
ELI's Related Posts Footer Links and Widget<= 1.2.04.20
Cross Site Request Forgery (CSRF)
3.55
7.1
07/04/2025
IGIT Related Posts With Thumb Image After Posts<= 4.5.3
Cross Site Scripting (XSS)
6.5
6.5
07/04/2025
EC Authorize.net<= 0.3.3
Cross Site Scripting (XSS)
14.2
7.1
16/04/2025
Author Box Plugin With Different Description<= 1.3.5
Cross Site Request Forgery (CSRF)
N/A
4.3
21/04/2025
Best Posts Summary<= 1.0
Cross Site Request Forgery (CSRF)
3.55
7.1
21/04/2025
CheckBot<= 1.05
Cross Site Request Forgery (CSRF)
3.55
7.1
18/04/2025
WP Vegas<= 2.2
Cross Site Scripting (XSS)
4.88
6.5
18/04/2025
Enhanced Paypal Shortcodes<= 0.5a
Cross Site Scripting (XSS)
N/A
6.5
15/04/2025
My Custom Widgets<= 2.0.5
Cross Site Scripting (XSS)
14.2
7.1
07/04/2025
360 View<= 1.1.0
Cross Site Scripting (XSS)
4.88
6.5
16/04/2025
Peekaboo<= 1.1
Cross Site Scripting (XSS)
4.88
6.5
16/04/2025
Mixcloud Embed<= 2.2.0
Cross Site Scripting (XSS)
4.88
6.5
16/04/2025
Mini twitter feed<= 3.0
Cross Site Scripting (XSS)
4.88
6.5
16/04/2025
Multi-Column Taxonomy List<= 1.5
Cross Site Scripting (XSS)
4.88
6.5
16/04/2025
Peadig’s Google +1 Button<= 0.1.2
Cross Site Scripting (XSS)
N/A
6.5
16/04/2025

Report vulnerabilities to earn bounties and rewards!

Read more