daroo

13,037.81

XP

300

Reports

4

Reports, last 90 days

#3

1 Sep, 2026
🇮🇩
Lvl 11
4
0
1
7
Website
X
GitHub
Affected software | Vulnerability
CVE
AXP
Severity
Reported
LeadConnector<= 4.0.5
Cross Site Scripting (XSS)
14.2
7.1
15/08/2026
SliceWP<= 1.2.10
Cross Site Scripting (XSS)
14.2
7.1
15/08/2026
Music Player for WooCommerce<= 1.8.9
Cross Site Scripting (XSS)
7.1
7.1
15/08/2026
Booking and Rental Manager<= 2.7.5
PHP Object Injection
30.36
8.8
19/01/2026
Like Button Rating<= 2.6.61
SQL Injection
8.5
8.5
16/08/2026
Stripe Payments<= 2.1.2
Cross Site Scripting (XSS)
14.2
7.1
15/08/2026
FreightCo<= 1.1.15
PHP Object Injection
19.6
9.8
27/01/2026
Directory Pro<= 2.5.8
SQL Injection
37.2
9.3
26/01/2026
Podlove Podcast Publisher<= 4.5.4
Cross Site Scripting (XSS)
8.17
7.1
15/08/2026
Swatchly – WooCommerce Variation Swatches for Products<= 1.4.13
Cross Site Scripting (XSS)
10.65
7.1
11/08/2026
SEO Plugin by Squirrly SEO<= 14.2.2
Cross Site Scripting (XSS)
28.4
7.1
14/08/2026
wpDataTables<= 6.5.1.4
Cross Site Scripting (XSS)
48.99
7.1
03/08/2026
TaxoPress<= 3.51.0
PHP Object Injection
30.36
8.8
26/02/2026
Newsletter<= 9.3.3
Cross Site Scripting (XSS)
71
7.1
03/08/2026
Templatiq<= 0.2.5
Arbitrary File Upload
22.28
9.9
23/01/2026
Duitku Payment Gateway<= 2.11.14
Sensitive Data Exposure
11.25
7.5
21/01/2026
Fluent Forms Pro Add On Pack< 6.2.12
Cross Site Scripting (XSS)
10.65
7.1
23/06/2026
Kirki<= 6.2.4
Cross Site Scripting (XSS)
85.2
7.1
07/07/2026
URL Shortify<= 2.5.0
Cross Site Scripting (XSS)
14.2
7.1
05/08/2026
Recipe Card Blocks for Gutenberg & Elementor<= 3.4.18
Cross Site Scripting (XSS)
14.2
7.1
05/08/2026
BP Better Messages<= 2.15.22
Cross Site Scripting (XSS)
14.2
7.1
20/07/2026
WP Multilang<= 2.4.31
Cross Site Scripting (XSS)
14.2
7.1
07/07/2026
Extra Product Options & Add-Ons for WooCommerce< 7.6
Arbitrary File Download
45
7.5
17/06/2026
FundEngine<= 1.7.9
PHP Object Injection
39.2
9.8
22/01/2026
Quill Forms<= 5.7.1
Cross Site Scripting (XSS)
14.2
7.1
14/01/2026
CTX Feed<= 6.6.47
Arbitrary File Download
11.03
4.9
27/01/2026
Templately<= 3.7.1
Cross Site Scripting (XSS)
85.2
7.1
06/07/2026
CubeWP<= 1.1.30
SQL Injection
17
8.5
22/01/2026
OMGF Pro<= 5.2.7
Arbitrary File Download
11.25
7.5
03/07/2026
SiteGuard WP Plugin<= 1.8.6
Cross Site Scripting (XSS)
85.2
7.1
03/07/2026
Geo Mashup<= 1.13.18
Local File Inclusion
74.52
8.1
10/03/2026
Geo Mashup<= 1.13.18
Cross Site Scripting (XSS)
32.66
7.1
28/02/2026
WPIDE – File Manager & Code Editor<= 3.5.7
Cross Site Scripting (XSS)
28.4
7.1
15/07/2026
WordPress File Upload<= 5.1.7
SQL Injection
37.2
9.3
05/02/2026
Popup Maker<= 1.23.0
Cross Site Scripting (XSS)
85.2
7.1
09/07/2026
Media LIbrary Assistant<= 3.38
Cross Site Scripting (XSS)
48.99
7.1
27/06/2026
CTX Feed<= 6.6.42
Remote Code Execution (RCE)
20.48
9.1
27/01/2026
Ninja Tables<= 5.2.9
Cross Site Scripting (XSS)
42.6
7.1
27/06/2026
Kadence WooCommerce Email Designer<= 1.5.19
Privilege Escalation
270.48
9.8
23/07/2026
NextGEN Gallery<= 4.2.3
Cross Site Scripting (XSS)
85.2
7.1
03/07/2026
Forminator<= 1.56.0
Cross Site Scripting (XSS)
97.98
7.1
10/07/2026
Forminator<= 1.56.0
Privilege Escalation
273.24
8.8
12/05/2026
SEO Plugin by Squirrly SEO<= 14.2.0
Cross Site Scripting (XSS)
28.4
7.1
27/06/2026
Simply Schedule Appointments<= 1.6.12.10
SQL Injection
128.34
9.3
25/06/2026
AI Engine<= 3.6.8
Cross Site Scripting (XSS)
130.64
7.1
18/05/2026
Betheme<= 28.5.7
Remote Code Execution (RCE)
111.38
9.9
10/05/2026
Jeg Kit for Elementor<= 3.2.10
PHP Object Injection
43.2
7.2
25/02/2026
BackWPup <= 5.7.4
Cross Site Scripting (XSS)
85.2
7.1
03/07/2026
GetGenie<= 4.4.3
Cross Site Scripting (XSS)
48.99
7.1
02/07/2026
Spam protection, AntiSpam, FireWall by CleanTalk<= 6.82
Cross Site Scripting (XSS)
71
7.1
24/06/2026
Booking Calendar<= 11.4.2
Cross Site Scripting (XSS)
42.6
7.1
16/07/2026
uListing<= 2.2.0
Broken Access Control
12.42
5.4
16/11/2025
uListing<= 2.2.0
Broken Access Control
7.42
4.3
16/11/2025
Kali Forms<= 2.4.18
Arbitrary File Deletion
26.57
7.7
17/06/2026
Funnel Builder by FunnelKit<= 3.15.0.8
Cross Site Scripting (XSS)
28.4
7.1
25/06/2026
Dokan<= 5.0.6
Cross Site Scripting (XSS)
28.4
7.1
20/06/2026
Contact Form Entries<= 1.5.2
Cross Site Scripting (XSS)
42.6
7.1
20/06/2026
Fluent CRM<= 3.1.7
Cross Site Scripting (XSS)
48.99
7.1
26/06/2026
Forminator<= 1.55.0.1
Cross Site Scripting (XSS)
97.98
7.1
22/06/2026
LatePoint<= 5.6.3
SQL Injection
148.8
9.3
26/06/2026
Forminator<= 1.55.0.2
Arbitrary File Download
155.25
7.5
23/06/2026
Amelia<= 2.4.2
SQL Injection
128.34
9.3
10/06/2026
ChatBot<= 8.3.7
Cross Site Scripting (XSS)
14.2
7.1
19/05/2026
AcyMailing SMTP Newsletter<= 10.11.0
Cross Site Scripting (XSS)
14.2
7.1
20/05/2026
Kirki<= 6.0.12
SQL Injection
223.2
9.3
20/05/2026
Timetics<= 1.0.58
Cross Site Scripting (XSS)
7.1
7.1
20/06/2026
Five Star Business Profile and Schema<= 2.3.19
Arbitrary Code Execution
13.65
9.1
13/10/2025
perfmatters<= 2.6.4
Cross Site Scripting (XSS)
32.66
7.1
23/06/2026
Optimole<= 4.2.7
Cross Site Scripting (XSS)
71
7.1
21/06/2026
Slider Revolution7.0.0-7.0.16
Cross Site Scripting (XSS)
114.31
7.1
15/06/2026
GeekyBot<= 1.2.5
SQL Injection
32.09
9.3
04/06/2026
Classified Listing<= 5.4.2
Cross Site Scripting (XSS)
32.66
7.1
03/05/2026
Custom Field Template<= 2.7.8
SQL Injection
25.5
8.5
28/02/2026
Embed Privacy<= 1.12.3
Arbitrary File Deletion
36.74
7.1
10/05/2026
Restaurant Menu by MotoPress<= 2.4.11
Broken Access Control
4.3
4.3
10/10/2025
wpForo Forum<= 3.0.9
SQL Injection
12.75
8.5
11/05/2026
H5P<= 1.17.7
Arbitrary File Deletion
73.49
7.1
10/05/2026
Blocksy Companion Pro<= 2.1.45
Remote Code Execution (RCE)
143.44
8.5
28/04/2026
WoodMart<= 8.5.3
Cross Site Scripting (XSS)
65.32
7.1
12/06/2026
Quform<= 2.23.0
Arbitrary File Upload
59.4
9.9
18/06/2026
RealHomes<= 4.5.3
PHP Object Injection
6.6
8.8
16/06/2026
JS Help Desk<= 3.1.1
Arbitrary File Deletion
19.92
7.7
14/06/2026
Post Snippets<= 4.0.19
Remote Code Execution (RCE)
19.13
8.5
27/04/2026
ListingPro<= 2.9.11
Cross Site Scripting (XSS)
13
6.5
21/04/2026
Customer Reviews for WooCommerce<= 5.110.1
Cross Site Scripting (XSS)
42.6
7.1
03/05/2026
Forminator<= 1.53.1
Cross Site Scripting (XSS)
195.96
7.1
06/05/2026
WP Activity Log<= 5.6.3.1
Cross Site Scripting (XSS)
81.65
7.1
25/05/2026
Fusion Builder<= 3.15.4
Privilege Escalation
318.78
8.8
13/05/2026
Media LIbrary Assistant<= 3.35
SQL Injection
87.98
8.5
04/05/2026
WP Photo Album Plus<= 9.1.13.005
SQL Injection
30
7.5
07/05/2026
Widget Options<= 4.2.3
Remote Code Execution (RCE)
102.47
9.9
27/04/2026
JetBooking<= 4.0.4.1
SQL Injection
93
9.3
24/04/2026
WP Travel Gutenberg Blocks<= 3.9.4
SQL Injection
37.2
9.3
28/02/2026
WP Activity Log<= 5.6.3.1
PHP Object Injection
225.4
9.8
21/05/2026
Fusion Builder<= 3.15.4
Arbitrary File Deletion
N/A
7.7
10/06/2026
JetFormBuilder<= 3.6.0.1
Cross Site Scripting (XSS)
106.5
7.1
20/05/2026
Attendance Manager<= 0.6.2
SQL Injection
11.4
7.6
08/01/2026
Avada<= 3.15.3
PHP Object Injection
106.26
8.8
13/05/2026
Fusion Builder<= 3.15.4
PHP Object Injection
N/A
9.8
10/06/2026
JetEngine<= 3.8.9.1
Cross Site Scripting (XSS)
177.5
7.1
19/05/2026

Report vulnerabilities to earn bounties and rewards!

Read more