dodoh4t

1,201.21

XP

54

Reports

12

Reports, last 90 days

#17

20 Jul, 2026
πŸ‡°πŸ‡·
Lvl 4
0
0
1
1
Website
X
GitHub
Affected software | Vulnerability
CVE
AXP
Severity
Reported
Bookly<= 27.7
SQL Injection
111.6
9.3
08/05/2026
Cart Lift<= 3.1.57
Cross Site Scripting (XSS)
16.33
7.1
22/05/2026
Gift Vouchers<= 4.6.9
Broken Access Control
13
6.5
12/05/2026
PDF Generator for WordPress<= 1.6.2
Server Side Request Forgery (SSRF)
8.28
7.2
30/04/2026
FormyChat<= 2.15.3
Cross Site Scripting (XSS)
14.2
7.1
16/05/2026
WowAddons<= 1.6.8
Broken Access Control
13
6.5
30/04/2026
Better Payment – Instant Payments, Donations, Fundraising with Subscriptions &amp; Mo<= 2.2.0
Other Vulnerability Type
13
6.5
23/05/2026
WP Inventory Manager<= 2.4.0
SQL Injection
12.75
8.5
08/05/2026
WPIDE – File Manager & Code Editor<= 3.5.6
Cross Site Request Forgery (CSRF)
8.8
8.8
02/05/2026
ProfileGrid <= 5.9.9.9
Cross Site Request Forgery (CSRF)
5.06
8.8
17/05/2026
Permalink Manager for WooCommerce<= 1.0.8.3
Cross Site Request Forgery (CSRF)
3.55
7.1
10/05/2026
GeoDirectory<= 2.8.161
Server Side Request Forgery (SSRF)
N/A
6.4
16/05/2026
Internal Links Manager<= 3.0.3
Cross Site Scripting (XSS)
14.2
7.1
08/05/2026
ShortPixel Adaptive Images<= 3.11.3
Cross Site Scripting (XSS)
14.95
6.5
29/04/2026
Gallery <= 4.7.8
SQL Injection
12.75
8.5
13/05/2026
License Manager for WooCommerce<= 3.0.15
Insecure Direct Object References (IDOR)
29.9
6.5
29/04/2026
Syncee Premium Dropshipping &amp; Wholesale<= 1.0.27
Broken Access Control
7.5
7.5
05/06/2026
Trinity Backup &#8211; Backup, Migrate, Restore, Clone &amp; Schedule Backups<= 2.0.9
Sensitive Data Exposure
15
7.5
29/04/2026
Intranet &amp; Private Site &#8211; All-In-One Intranet<= 1.8.1
Broken Access Control
15
7.5
30/04/2026
Object Cache 4 everyone<= 2.3.2
Sensitive Data Exposure
15
7.5
30/04/2026
SureDash<= 1.8.0
SQL Injection
39.1
8.5
27/04/2026
SEO Redirection<= 9.17
Cross Site Scripting (XSS)
14.2
7.1
05/05/2026
VikRentCar<= 1.4.5
Insecure Direct Object References (IDOR)
15
7.5
10/05/2026
Affiliates Manager<= 2.9.50
Sensitive Data Exposure
15
7.5
23/05/2026
Conekta Payment Gateway<= 6.0.0
Sensitive Data Exposure
7.5
7.5
02/06/2026
Advanced 301 and 302 Redirect<= 1.6.9
SQL Injection
18.6
9.3
01/06/2026
Listdom<= 5.5.0
Privilege Escalation
43.8
7.3
15/05/2026
WP Travel Engine<= 6.7.10
Other Vulnerability Type
15
7.5
10/05/2026
Chatway Live Chat &#8211; AI Chatbot, Customer Support, FAQ &amp; Helpdesk Customer S<= 1.4.8
Sensitive Data Exposure
14.8
7.4
30/04/2026
Welcart e-Commerce<= 2.11.28
Broken Access Control
13
6.5
23/05/2026
Amelia<= 2.3
Privilege Escalation
182.16
8.8
08/05/2026
Backup and Staging by WP Time Capsule<= 1.22.25
Broken Authentication
45
7.5
30/04/2026
QuickWebP &#8211; Compress / Optimize Images &amp; Convert WebP | SEO Friendly<= 3.2.7
Arbitrary File Deletion
22.28
9.9
30/04/2026
Favicon<= 1.3.46
Cross Site Scripting (XSS)
71
7.1
30/04/2026
Stripe Payments<= 2.0.98
Bypass Vulnerability
13
6.5
29/04/2026
Booking Manager<= 2.1.18
Cross Site Scripting (XSS)
6.5
6.5
29/04/2026
Disable Comments for Any Post Types (Remove comments)<= 1.3.0
Broken Authentication
24.5
7.1
29/04/2026
Views for WPForms<= 3.4.6
SQL Injection
12.75
8.5
28/04/2026
Ninja Forms Views &#8211; Display &amp; Edit Ninja Forms Submissions on your site fro<= 3.3.2
SQL Injection
12.75
8.5
28/04/2026
VikBooking Hotel Booking Engine & PMS<= 1.8.10
Arbitrary File Deletion
51.6
8.6
27/04/2026
BP Better Messages<= 2.14.16
Insecure Direct Object References (IDOR)
15
7.5
27/04/2026
WpEvently<= 5.3.3
Other Vulnerability Type
34.5
7.5
08/05/2026

Report vulnerabilities to earn bounties and rewards!

Read more