dutafi

1,739.17

XP

86

Reports

8

Reports, last 90 days

#2

16 Sep, 2026
🇻🇳
Lvl 5
0
1
0
1
Website
X
GitHub
Affected software | Vulnerability
CVE
AXP
Severity
Reported
Under Construction<= 5.82
Cross Site Scripting (XSS)
8.17
7.1
12/08/2026
Bricksforge<= 3.1.8.8
Privilege Escalation
22.05
9.8
16/08/2026
MP3 Audio Player for Music, Radio & Podcast by Sonaar<= 5.13.1
Cross Site Scripting (XSS)
14.2
7.1
05/08/2026
Super Store Finder<= 7.10
Cross Site Scripting (XSS)
7.1
7.1
25/08/2026
JetEngine<= 3.8.14.2
Cross Site Scripting (XSS)
81.65
7.1
21/08/2026
Kadence Shop Kit<= 3.0.6
SQL Injection
N/A
8.5
07/07/2026
CP Media Player<= 1.3.0
Cross Site Scripting (XSS)
7.1
7.1
15/08/2026
Toolset Blocks<= 1.6.26
Cross Site Scripting (XSS)
10.65
7.1
05/08/2026
Brave Conversion Engine (PRO)<= 0.8.6
Cross Site Scripting (XSS)
7.1
7.1
09/07/2026
TourMaster Plugin<= 5.4.9
Cross Site Scripting (XSS)
7.1
7.1
19/07/2026
WP Project Manager Pro<= 4.0.1
SQL Injection
12.75
8.5
07/07/2026
BookingPress Appointment Booking Pro<= 6.0.6
SQL Injection
N/A
9.3
24/07/2026
Paymob for WooCommerce<= 4.1.10
Cross Site Scripting (XSS)
10.65
7.1
14/08/2026
WordPress Persistent Login<= 3.1.0
SQL Injection
12.75
8.5
01/08/2026
TheGem (Elementor)<= 5.12.3
SQL Injection
27.9
9.3
12/08/2026
B2BKing Premium<= 5.6.07
Cross Site Scripting (XSS)
14.2
7.1
04/08/2026
JetEngine<= 3.8.14.1
Cross Site Scripting (XSS)
81.65
7.1
17/08/2026
JetEngine<= 3.8.14
Remote Code Execution (RCE)
338.1
9.8
14/08/2026
BBQ Pro<= 3.9
Cross Site Scripting (XSS)
N/A
7.1
22/07/2026
YITH WooCommerce Membership Premium<= 2.33.0
SQL Injection
8.5
8.5
26/07/2026
JetAppointment<= 2.5.2
SQL Injection
21.39
9.3
07/08/2026
Readabler< 2.0.18
SQL Injection
18.6
9.3
16/07/2026
Ultimate Dashboard Pro<= 3.11.2
Cross Site Scripting (XSS)
42.6
7.1
09/05/2026
RegistrationMagic<= 6.0.9.7
PHP Object Injection
14.7
9.8
06/07/2026
MasterStudy LMS<= 3.7.41
Broken Access Control
7.48
6.5
31/07/2026
MasterStudy LMS<= 3.7.41
Privilege Escalation
10.87
6.3
30/07/2026
Chaty Pro<= 3.5.8
Cross Site Scripting (XSS)
14.2
7.1
04/08/2026
WPJAM Basic<= 7.0.1
SQL Injection
10.7
9.3
28/06/2026
If-So Dynamic Content Personalization<= 1.10
SQL Injection
13.95
9.3
23/07/2026
WP Full Stripe Free<= 8.5.0
Cross Site Scripting (XSS)
10.65
7.1
26/06/2026
Houzez Property Feed<= 2.5.48
Cross Site Scripting (XSS)
7.1
7.1
10/07/2026
WP Data Access<= 5.5.79
Cross Site Scripting (XSS)
14.2
7.1
25/06/2026
Thrive Architect<= 10.9.3.1
Cross Site Scripting (XSS)
28.4
7.1
19/07/2026
EmbedPress<= 4.5.6
Cross Site Scripting (XSS)
56.8
7.1
26/06/2026
JetEngine<= 3.8.13.1
Cross Site Scripting (XSS)
81.65
7.1
28/07/2026
AffiliateWP<= 2.35.0
Cross Site Scripting (XSS)
7.1
7.1
12/07/2026
Message Filter for Contact Form 7<= 1.6.3.9
Cross Site Scripting (XSS)
8.17
7.1
26/06/2026
Dokan Pro<= 5.0.0
Cross Site Scripting (XSS)
14.2
7.1
30/04/2026
Easy Form Builder<= 4.0.12
Cross Site Scripting (XSS)
7.1
7.1
28/06/2026
AffiliateWP<= 2.34.0
Cross Site Scripting (XSS)
14.2
7.1
19/05/2026
Broadcast Live Video<= 7.2.4
Arbitrary File Deletion
N/A
5.3
26/06/2026
Sunshine Photo Cart<= 3.6.10.1
Broken Access Control
N/A
6.3
16/06/2026
Real Estate Manager Pro<= 12.8.5
Cross Site Scripting (XSS)
8.17
7.1
07/06/2026
Sprout Clients<= 3.2.3
Cross Site Scripting (XSS)
N/A
7.1
08/06/2026
Download Monitor - WPForms Lock<= 1.0.4
Cross Site Scripting (XSS)
N/A
7.1
30/04/2026
Breakdance<= 2.7.1
Cross Site Scripting (XSS)
14.2
7.1
05/05/2026
Directorist<= 8.8.2
PHP Object Injection
9.8
9.8
30/06/2026
Anti-Malware Security and Brute-Force Firewall<= 4.23.89
Cross Site Scripting (XSS)
N/A
5.8
23/06/2026
Events Manager<= 7.3.6
PHP Object Injection
52.8
8.8
23/06/2026
Message Filter for Contact Form 7<= 1.6.3.8
Cross Site Scripting (XSS)
8.17
7.1
03/06/2026
Bopo – WooCommerce Product Bundle Builder<= 1.2.0
Cross Site Scripting (XSS)
8.17
7.1
03/06/2026
Real Estate Manager Pro<= 12.8.3
Cross Site Scripting (XSS)
32.66
7.1
24/04/2026
Coaching<= 3.9.2
Cross Site Scripting (XSS)
14.2
7.1
07/05/2026
Newsletters<= 4.14
Cross Site Scripting (XSS)
7.1
7.1
10/06/2026
Funnel Kit Funnel Builder PRO<= 3.15.0.7
Cross Site Scripting (XSS)
14.2
7.1
26/05/2026
Visitor Traffic Real Time Statistics Pro<= 11.9.1
Cross Site Scripting (XSS)
14.2
7.1
19/05/2026
Jobmonster<= 4.8.5
Cross Site Scripting (XSS)
16.33
7.1
18/05/2026
Customize My Account for WooCommerce<= 4.3.9
Cross Site Scripting (XSS)
14.2
7.1
14/05/2026
Google Maps CP<= 1.2.5
Cross Site Scripting (XSS)
7.1
7.1
24/06/2026
Simple Link Directory<= 15.0.5
Cross Site Scripting (XSS)
14.2
7.1
02/05/2026
ARForms<= 7.1.2
Cross Site Scripting (XSS)
32.66
7.1
24/04/2026
perfmatters<= 2.6.3
Cross Site Scripting (XSS)
28.4
7.1
29/05/2026
Buddyboss Platform<= 3.0.4
PHP Object Injection
7.35
9.8
16/06/2026
Directorist Booking<= 3.0.3
SQL Injection
12.75
8.5
26/05/2026
Thrive Apprentice< 10.8.10.2
PHP Object Injection
19.6
9.8
18/04/2026
WPFunnels Pro<= 2.9.4
Cross Site Scripting (XSS)
14.2
7.1
10/05/2026
WordPress Social Login and Register<= 7.9.0
Local File Inclusion
N/A
6.6
29/08/2025

Report vulnerabilities to earn bounties and rewards!

Read more