daroo

1729.64

XP

122

Reports

33

Reports, last 90 days

#4

29 Dec, 2025
Lvl 5
0
0
0
0
Website
X
GitHub
Affected software | Vulnerability
CVE
AXP
Severity
Reported
Simple File List<= 6.1.16
Broken Access Control
4.66
5.4
No date
BBP Core<= 1.4.1
Broken Access Control
10.6
5.3
No date
Brave<= 0.8.3
Broken Access Control
10.6
5.3
No date
Poll, Survey & Quiz Maker Plugin by Opinion Stage<= 19.12.2
Broken Access Control
10.6
5.3
No date
Tablesome<= 1.1.35.1
Broken Access Control
6.21
5.4
No date
Tablesome<= 1.1.35.1
Sensitive Data Exposure
5.75
5
No date
User Feedback<= 1.10.1
SQL Injection
43.7
7.6
No date
TS Poll<= 2.5.3
Broken Access Control
4.3
4.3
No date
Wappointment<=2.7.2
Broken Access Control
10.6
5.3
No date
Gutenverse Form<= 2.3.1
Broken Access Control
4.88
6.5
No date
WP Time Slots Booking Form<= 1.2.39
Broken Access Control
4.88
6.5
No date
WP Adminify<= 4.0.6.1
Broken Access Control
6.21
5.4
No date
WP Adminify<= 4.0.6.1
Broken Access Control
4.95
4.3
No date
Watu Quiz<= 3.4.5
Broken Access Control
4.3
4.3
No date
Listdom<= 5.0.1
Broken Access Control
4.05
5.4
No date
Simple Link Directory<= 8.8.3
Broken Access Control
10.6
5.3
No date
Easy Form Builder<= 3.8.20
Broken Access Control
10.6
5.3
No date
TrueBooker<= 1.1.0
Broken Access Control
7.95
5.3
No date
UsersWP<= 1.2.48
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
Webba Booking<= 6.2.1
Broken Access Control
9.89
4.3
No date
Simple Link Directory<= 8.8.3
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
Admin and Site Enhancements (ASE)<= 8.0.8
Broken Access Control
6.75
2.7
No date
Watu Quiz<= 3.4.5
Broken Access Control
4.88
6.5
No date
Directorist<= 8.5.6
Open Redirection
9.4
4.7
No date
Business Directory<= 6.4.19
Broken Access Control
2.45
4.9
No date
Essential Real Estate<= 5.2.2
Broken Access Control
10.6
5.3
No date
Essential Real Estate<= 5.2.2
Insecure Direct Object References (IDOR)
6.5
6.5
No date
Easy Property Listings<= 3.5.16
Broken Access Control
4.3
4.3
No date
Ultimate Auction <= 4.3.2
Sensitive Data Exposure
10.6
5.3
No date
Ultimate Auction <= 4.3.2
Broken Access Control
5.4
5.4
No date
Media Library Tools<= 1.6.15
SQL Injection
7.6
7.6
No date
Nelio Popups<= 1.3.0
Cross Site Scripting (XSS)
4.88
6.5
No date
Salon booking system<= 10.30.3
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
My Tickets<= 2.1.0
Broken Access Control
2.42
4.3
No date
Custom Layouts – Post + Product grids made easy<= 1.4.12
Broken Access Control
3.23
4.3
No date
Thank You Page Customizer for WooCommerce<= 1.1.8
Broken Access Control
4.95
4.3
No date
WP AI CoPilot<= 1.2.7
Sensitive Data Exposure
3.23
4.3
No date
Stylish Price List<= 7.2.2
Broken Access Control
10.6
5.3
No date
Masteriyo - LMS<= 2.0.3
Sensitive Data Exposure
14.95
6.5
Oct 31, 2025
CatFolders<= 2.5.3
Broken Access Control
10.6
5.3
No date
FluentCommunity<= 2.0.0
Broken Access Control
4.95
4.3
No date
WP ERP<= 1.16.6
Sensitive Data Exposure
7.48
6.5
Oct 27, 2025
PropertyHive<= 2.1.12
Broken Access Control
17.25
7.5
Oct 25, 2025
PropertyHive<= 2.1.12
Broken Access Control
4.95
4.3
No date
SupportCandy<= 3.4.1
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
ForumWP<= 2.1.4
Broken Access Control
3.23
4.3
No date
wpForo Forum<= 2.4.10
Broken Access Control
15
7.5
Oct 19, 2025
RestroPress<= 3.2.3.5
Broken Access Control
6.5
6.5
Oct 18, 2025
Contact Form Email<= 1.3.58
Broken Access Control
4.88
6.5
No date
Appointment Booking Calendar<= 1.3.95
Broken Access Control
5.4
5.4
No date
CoSchedule<= 3.4.0
Broken Access Control
18.29
5.3
No date
Survey Maker<= 5.1.9.4
Broken Access Control
4.88
6.5
No date
Seriously Simple Podcasting<= 3.13.0
Cross Site Request Forgery (CSRF)
2.47
4.3
No date
Seriously Simple Podcasting<= 3.13.0
Broken Access Control
48.76
5.3
No date
Seriously Simple Podcasting<= 3.13.0
Sensitive Data Exposure
48.76
5.3
No date
Restaurant Menu by MotoPress<= 2.4.7
Sensitive Data Exposure
6.5
6.5
Oct 10, 2025
Ultimate FAQ<= 2.4.3
Cross Site Request Forgery (CSRF)
1.08
4.3
No date
PowerPress Podcasting<= 11.13.12
Cross Site Request Forgery (CSRF)
1.85
4.3
No date
VikBooking Hotel Booking Engine & PMS<= 1.8.2
Sensitive Data Exposure
11.8
5.9
Oct 8, 2025
EventPrime<= 4.2.4.1
Sensitive Data Exposure
4.3
4.3
No date
EventPrime<= 4.2.4.1
Broken Access Control
8.6
4.3
No date
Feather Login Page<= 1.1.7
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
WP Hotel Booking<= 2.2.7
Sensitive Data Exposure
8.6
4.3
No date
WP Hotel Booking<= 2.2.7
Cross Site Request Forgery (CSRF)
0.54
4.3
No date
WP Hotel Booking<= 2.2.7
Cross Site Scripting (XSS)
2.95
5.9
No date
VikBooking Hotel Booking Engine & PMS<= 1.8.2
Broken Access Control
10.6
5.3
No date

Report vulnerabilities to earn bounties and rewards!

Read more