Pricing
Case studies
Login
Start trial
Ananda Dhakal (Patchstack)
Say thanks
0.00
XP
0
Reports
12
Reports, last 90 days
-
1 Sep, 2026
🇳🇵
Lvl 0
0
0
0
0
Website
X
GitHub
Sort by
Priority
Severity
Exploited
Search
Clear
Affected software | Vulnerability
CVE
AXP
Severity
Reported
Fluent Forms Pro Add On Pack
<= 6.2.12
Broken Access Control
11.25
7.5
13/08/2026
Fluent Forms Pro Add On Pack
<= 6.2.12
Privilege Escalation
16.88
7.5
13/08/2026
SiteGround Security
<= 1.6.6
Bypass Vulnerability
113.4
8.1
6 days ago
WordPress Social Login and Register
<= 7.8.2
Cross Site Scripting (XSS)
16.33
7.1
6 days ago
Rank Math SEO
<= 1.0.276
Remote Code Execution (RCE)
N/A
7.2
20/08/2026
ACF Extended
<= 0.9.2.6
Broken Access Control
N/A
4.3
04/06/2026
FluentBooking Pro
<= 2.2.4
Cross Site Request Forgery (CSRF)
N/A
8.1
13/08/2026
FluentPlayer Pro
<= 1.3.2
Broken Access Control
N/A
4.9
13/08/2026
Fluent Boards Pro
<= 2.0.11
PHP Object Injection
N/A
7.2
13/08/2026
Fluent Boards Pro
<= 2.0.11
Arbitrary File Deletion
N/A
6.8
13/08/2026
Fluent Boards Pro
<= 2.0.11
Arbitrary File Upload
N/A
9.1
13/08/2026
Fluent Boards Pro
<= 2.0.11
Cross Site Scripting (XSS)
N/A
6.5
13/08/2026
FluentCRM Pro
<= 3.1.12
Privilege Escalation
N/A
7.2
13/08/2026
Fluent Support Pro
<= 2.3.1
Cross Site Request Forgery (CSRF)
N/A
5.4
13/08/2026
Fluent Boards Pro
<= 2.0.11
Insecure Direct Object References (IDOR)
N/A
5.3
13/08/2026
FluentCRM Pro
<= 3.1.12
Server Side Request Forgery (SSRF)
N/A
4.9
13/08/2026
Fluent Support Pro
<= 2.3.1
Broken Access Control
N/A
5.4
13/08/2026
FluentCRM Pro
<= 3.1.12
SQL Injection
N/A
7.6
13/08/2026
WP Cafe Pro
< 3.0.15
Sensitive Data Exposure
N/A
7.5
01/07/2026
InfiniteWP Client
<= 1.13.9
SQL Injection
N/A
7.6
16/07/2026
WP Cafe Pro
< 3.0.15
Local File Inclusion
N/A
9.8
01/07/2026
WP Cafe Pro
< 3.0.15
Local File Inclusion
N/A
6.6
01/07/2026
OptionTree
<= 2.7.3
PHP Object Injection
N/A
7.2
06/07/2026
Slider by 10Web
<= 1.2.62
Cross Site Request Forgery (CSRF)
3.7
7.4
09/07/2026
Wise Chat
<= 3.4
Cross Site Scripting (XSS)
N/A
6.5
09/07/2026
Featured Video Plus
<= 2.3.3
Cross Site Scripting (XSS)
N/A
6.5
09/07/2026
Charitable
<= 1.8.11.3
Broken Access Control
15
7.5
09/07/2026
Frontend Admin by DynamiApps
<= 3.29.10
Cross Site Scripting (XSS)
N/A
6.5
09/07/2026
WPZOOM Forms – Contact Form Plugin for Gutenberg
<= 2.0.7
Cross Site Scripting (XSS)
N/A
6.5
09/07/2026
Login With Ajax
<= 4.5.1
Cross Site Scripting (XSS)
N/A
6.5
09/07/2026
Video Conferencing with Zoom
<= 4.6.9
Cross Site Scripting (XSS)
N/A
6.5
09/07/2026
Wufoo Shortcode
<= 1.55
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
Typing Effect
<= 1.3.7
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
Table Of Contents Block
<= 1.5.0
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
WP Tab Widget
<= 1.2.11
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
GeoDirectory
<= 2.8.177
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
RomethemeForm For Elementor
<= 1.2.6
Broken Access Control
N/A
4.3
14/07/2026
Gravity Booster – Styles & Layouts for Gravity Forms
<= 6.1
Broken Access Control
10.8
5.4
14/07/2026
WP Table Builder
<= 2.2.1
Broken Access Control
N/A
4.3
16/07/2026
3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery
<= 1.16.20
Sensitive Data Exposure
31.8
5.3
16/07/2026
Shortcodes and extra features for Phlox theme
<= 2.17.22
Sensitive Data Exposure
31.8
5.3
16/07/2026
Razorpay for WooCommerce
<= 4.8.7
Insecure Direct Object References (IDOR)
42.4
5.3
16/07/2026
MailChimp For WooCommerce
< 6.2
SQL Injection
N/A
7.6
16/07/2026
WP Data Access
<= 5.5.79
Cross Site Scripting (XSS)
N/A
5.9
13/07/2026
Gutenverse Companion
<= 2.5.1
Server Side Request Forgery (SSRF)
10.8
7.2
09/07/2026
Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK)
<= 1.0.7
Broken Access Control
N/A
7.5
09/07/2026
Advanced Custom Fields: Font Awesome Field
<= 6.1.2
Broken Access Control
N/A
4.3
06/07/2026
Theme My Login
<= 7.1.14
Cross Site Request Forgery (CSRF)
6.45
4.3
06/07/2026
Custom CSS and JavaScript
<= 2.0.16
Sensitive Data Exposure
10.6
5.3
08/07/2026
Export Import Menus
<= 1.9.2
Sensitive Data Exposure
10.6
5.3
08/07/2026
Featured Video Plus
<= 2.3.3
Sensitive Data Exposure
10.6
5.3
08/07/2026
Plugins Garbage Collector (Database Cleanup)
<= 0.14
Cross Site Request Forgery (CSRF)
3.25
6.5
08/07/2026
Subscribe to Comments
<= 2.3.1
Cross Site Scripting (XSS)
N/A
5.9
08/07/2026
Polylang Pro
<= 3.8.5
Sensitive Data Exposure
N/A
4.3
No date
WPBruiser {no- Captcha anti-Spam}
<= 3.1.43
PHP Object Injection
19.6
9.8
09/07/2026
Order Delivery Date for WooCommerce
<= 4.6.0
Privilege Escalation
N/A
7.2
09/07/2026
Simple Membership
<= 4.7.8
Broken Access Control
30
7.5
14/07/2026
Mercado Pago payments for WooCommerce
<= 8.9.0
Insecure Direct Object References (IDOR)
42.4
5.3
16/07/2026
FiboSearch
<= 1.33.0
Cross Site Scripting (XSS)
N/A
5.9
16/07/2026
Powerkit
<= 3.1.0
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
Advanced AJAX Product Filters
<= 3.2.0.3
Cross Site Scripting (XSS)
42.6
7.1
14/07/2026
JetFormBuilder
<= 3.6.4.1
Broken Access Control
51.75
7.5
02/07/2026
ShopLentor Pro
<= 2.8.5
Broken Access Control
7.95
5.3
01/07/2026
ShopLentor Pro
<= 2.8.5
Broken Access Control
3.22
4.3
01/07/2026
JetSearch
<= 3.6.1.2
Sensitive Data Exposure
12.19
5.3
02/07/2026
JetBlocks For Elementor
<= 1.5.0
Sensitive Data Exposure
36.57
5.3
02/07/2026
JetReviews
<= 3.0.1
Sensitive Data Exposure
9.14
5.3
02/07/2026
Auto Featured Image (Auto Post Thumbnail)
<= 5.0.4
Server Side Request Forgery (SSRF)
N/A
4.9
30/06/2026
User Profile Picture
<= 2.6.3
Insecure Direct Object References (IDOR)
N/A
2.7
30/06/2026
WP Maps
<= 4.9.6
Sensitive Data Exposure
12.9
4.3
16/07/2026
Spider Analyser – WordPress搜索引擎蜘蛛分析插件
<= 2.1.3
Remote Code Execution (RCE)
30
10
12/06/2026
Dokan
<= 5.0.10
Broken Access Control
N/A
5.3
14/07/2026
Profile Builder
<= 3.16.5
Broken Access Control
31.8
5.3
14/07/2026
MailOptin
<= 1.2.78.0
Cross Site Scripting (XSS)
N/A
6.5
09/07/2026
Export User Data
<= 2.2.6
PHP Object Injection
7.35
9.8
08/06/2026
Easy PayPal Buy Now Button
<= 2.0.4
Cross Site Scripting (XSS)
14.2
7.1
13/07/2026
Kali Forms
<= 2.4.18
Cross Site Scripting (XSS)
16.33
7.1
09/07/2026
Ad Invalid Click Protector (AICP)
<= 1.3.0
Broken Access Control
13
6.5
08/07/2026
Exclusive Addons Elementor
<= 2.8.0
Sensitive Data Exposure
31.8
5.3
14/07/2026
Easy Digital Downloads
<= 3.6.9
Arbitrary File Deletion
N/A
4.9
30/06/2026
Checkout Field Editor for WooCommerce – Checkout Manager
<= 3.0.5
Cross Site Scripting (XSS)
N/A
5.9
15/06/2026
Insert Headers and Footers Code – HT Script
<= 1.1.8
Cross Site Request Forgery (CSRF)
N/A
4.3
09/06/2026
Feedzy
<= 5.2.4
Server Side Request Forgery (SSRF)
N/A
4.9
14/07/2026
Photonic Gallery & Lightbox for Flickr, SmugMug & Others
<= 3.33
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
Location Weather
<= 3.0.6
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
WP Google Review Slider
<= 18.4
Cross Site Request Forgery (CSRF)
4.3
4.3
06/07/2026
WP Google Review Slider
<= 18.4
SQL Injection
N/A
7.6
06/07/2026
Kirki
<= 6.0.13
Arbitrary File Deletion
N/A
6.8
23/06/2026
ЮKassa для WooCommerce
<= 2.16.1
Sensitive Data Exposure
4.88
6.5
12/06/2026
Visual Composer Website Builder
<= 45.15.0
Broken Access Control
8.63
5
14/07/2026
Event Tickets
<= 5.29.0.1
Broken Access Control
36.57
5.3
16/07/2026
MapPress Maps for WordPress
<= 2.97.6
Sensitive Data Exposure
21.2
5.3
16/07/2026
Orbit Fox by ThemeIsle
<= 3.0.7
Cross Site Scripting (XSS)
N/A
5.9
16/07/2026
BetterDocs
<= 4.6.2
Cross Site Scripting (XSS)
N/A
6.5
14/07/2026
WordPress Social Login and Register
<= 7.8.0
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
AffiliateX
<= 2.3.5
Server Side Request Forgery (SSRF)
10.8
5.4
09/07/2026
Abandoned Cart Lite for WooCommerce
<= 6.8.0
Cross Site Scripting (XSS)
N/A
5.9
09/06/2026
Byteflows Travel & Hotel Booking
<= 1.0.0
Sensitive Data Exposure
N/A
7.5
09/07/2026
Paid Member Subscriptions
<= 3.0.7
Insecure Direct Object References (IDOR)
7.5
7.5
09/07/2026
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce
<= 2.10.22
SQL Injection
N/A
7.6
09/06/2026
1
2
3
4
Report vulnerabilities to earn bounties and rewards!
Read more
Include pending
Back to top