Asim Alshaya

1,236.79

XP

46

Reports

1

Reports, last 90 days

#1

23 Oct, 2026
🇸🇦
Lvl 4
1
0
0
0
Website
X
GitHub
Affected software | Vulnerability
CVE
AXP
Severity
Reported
ACF Extended<= 0.9.2.7
Cross Site Scripting (XSS)
65.32
7.1
19/08/2026
WP EasyPay<= 4.5.4
Broken Access Control
5.3
5.3
03/08/2026
Patreon WordPress<= 1.9.17
Cross Site Request Forgery (CSRF)
2.33
8.1
04/08/2026
Contact Form 7 – Dynamic Text Extension<= 5.0.7
Sensitive Data Exposure
69
7.5
24/08/2026
Team Section Block<= 2.0.4
Cross Site Scripting (XSS)
8.17
7.1
16/08/2026
StreamCast<= 2.4.6
Server Side Request Forgery (SSRF)
8.28
7.2
16/07/2026
Before After Image Comparison – Image comparison for WP<= 1.1.21
Broken Access Control
3.11
5.4
16/08/2026
WPComplete<= 2.9.5.6
Cross Site Request Forgery (CSRF)
2.04
7.1
04/08/2026
Advanced Google reCAPTCHA<= 5.40
Broken Authentication
60.95
5.3
28/08/2026
Progress Planner<= 1.10.0
Broken Access Control
2.97
8.8
09/07/2026
Parallax Section block<= 2.0.4
Cross Site Scripting (XSS)
8.17
7.1
16/08/2026
Geo Mashup<= 1.13.21
Cross Site Scripting (XSS)
8.17
7.1
29/08/2026
FluentBoards<= 2.0.12
Privilege Escalation
8.15
6.3
15/08/2026
WooCommerce Product Table Lite<= 5.6.7
Cross Site Scripting (XSS)
16.33
7.1
11/07/2026
Blocksy Companion<= 2.1.55
Broken Access Control
74.75
6.5
28/08/2026
ShortPixel Image Optimizer<= 6.5.5
PHP Object Injection
28.17
4.9
28/08/2026
Ad Inserter<= 2.8.18
Cross Site Scripting (XSS)
81.65
7.1
28/08/2026
WP EasyPay<= 4.5.3
Bypass Vulnerability
5.3
5.3
03/08/2026
WP Go Maps<= 10.1.08
Denial of Service Attack
60.95
5.3
28/08/2026
Activity Log<= 2.13.1
Cross Site Request Forgery (CSRF)
23.96
7.1
01/08/2026
Smush Image Compression and Optimization<= 4.2.0
Denial of Service Attack
120.75
7.5
14/07/2026
WPComplete<= 2.9.5.6
Cross Site Scripting (XSS)
8.17
7.1
04/08/2026
Easy Elementor Addons<= 2.3.7
Cross Site Request Forgery (CSRF)
2.76
9.6
19/07/2026
Contact Form by Supsystic< 1.10.0
Bypass Vulnerability
11.21
6.5
08/08/2026
Contact Form by Supsystic< 1.10.0
Cross Site Scripting (XSS)
12.25
7.1
08/08/2026
Popup by Supsystic<= 1.13.0
PHP Object Injection
22.54
9.8
10/08/2026
Popup by Supsystic<= 1.13.0
Broken Authentication
20.93
9.1
10/08/2026
Ultimate Maps by Supsystic< 1.5.0
Broken Access Control
17.25
7.5
08/08/2026
Ultimate Maps by Supsystic< 1.5.0
Cross Site Scripting (XSS)
16.33
7.1
08/08/2026
Ultimate Maps by Supsystic< 1.5.0
PHP Object Injection
22.54
9.8
08/08/2026
Easy Google Maps< 1.14.2
Remote File Inclusion
16.56
7.2
08/08/2026
Easy Google Maps<= 1.13.0
PHP Object Injection
22.54
9.8
08/08/2026
Starter Templates by Kadence WP<= 2.3.3
Denial of Service Attack
86.25
7.5
06/08/2026
Breeze<= 2.5.12
Arbitrary Content Deletion
113.16
8.2
02/08/2026
Travelfic Toolkit<= 1.5.1
Broken Access Control
4.66
8.1
23/07/2026
AcyMailing SMTP Newsletter<= 10.11.1
Broken Access Control
4.88
6.5
17/07/2026
AcyMailing SMTP Newsletter<= 10.11.1
Cross Site Scripting (XSS)
4.88
6.5
17/07/2026
GiveWP< 4.16.6
Cross Site Scripting (XSS)
N/A
6.5
02/08/2026
Headless Single Sign On<= 1.6
PHP Object Injection
5.64
9.8
25/07/2026
Headless Single Sign On<= 1.6
Bypass Vulnerability
5.64
9.8
25/07/2026
Colissimo Officiel : Méthodes de livraison pour WooCommerce<= 2.10.0
Cross Site Scripting (XSS)
16.33
7.1
17/07/2026
SureDash<= 1.10.1
Cross Site Scripting (XSS)
8.17
7.1
16/07/2026
Smart Online Order for Clover<= 1.6.1
Cross Site Scripting (XSS)
8.17
7.1
14/07/2026
Active Products Tables for WooCommerce<= 1.1.1
SQL Injection
21.39
9.3
14/07/2026
BuddyPress<= 14.3.4
Broken Access Control
60
7.5
28/08/2025

Report vulnerabilities to earn bounties and rewards!

Read more