Pricing
Solutions
WordPress security
Instantly fix and mitigate vulnerabilities
Plugin auditing
Paid auditing for WordPress vendors
Managed VDP
Start a security program for your plugins
Bug Bounty
Join the community and earn bounties
Enterprise API
At scale monitoring and vPatching for hosts
Vulnerability database
The latest WordPress security intelligence
Login
Start trial
Lenon Leite
0
XP
0
Reports
0
Reports, last 90 days
-
18 Nov, 2025
Lvl 0
0
0
0
0
Website
X
GitHub
Sort by
Priority
Severity
Exploited
Search
Affected software | Vulnerability
CVE
AXP
Severity
Reported
Homepage Product Organizer for WooCommerce
<= 1.1
SQL Injection
N/A
9.1
No date
Hermit 音乐播放器
<= 3.1.6
SQL Injection
N/A
7.4
No date
Hermit 音乐播放器
<= 3.1.6
SQL Injection
N/A
8.3
No date
3xSocializer
<= 0.98.22
SQL Injection
N/A
6
No date
[GWA] AutoResponder
<= 2.3
SQL Injection
N/A
7.3
No date
Edict Lite
<= 1.1.4
Arbitrary File Upload
N/A
8.8
No date
The100
<= 1.1.2
Arbitrary File Upload
N/A
8.8
No date
WP Store
<= 1.1.9
Arbitrary File Upload
N/A
8.8
No date
Eight Sec
<= 1.1.4
Arbitrary File Upload
N/A
8.8
No date
EightLaw Lite
<= 2.1.5
Arbitrary File Upload
N/A
8.8
No date
Eightmedi Lite
<= 2.1.8
Arbitrary File Upload
N/A
8.8
No date
EightStore Lite
<= 1.2.5
Arbitrary File Upload
N/A
8.8
No date
Brovy
<= 1.3
Arbitrary File Upload
N/A
8.8
No date
WPparallax
<= 2.0.6
Arbitrary File Upload
N/A
8.8
No date
Arrival
<= 1.4.2
Arbitrary File Upload
N/A
8.8
No date
Ultra Seven
<= 1.2.8
Arbitrary File Upload
N/A
8.8
No date
Opstore
<= 1.4.3
Arbitrary File Upload
N/A
8.8
No date
AccessPress Parallax
<= 4.5
Arbitrary File Upload
N/A
8.8
No date
Accesspress Lite
<= 2.92
Arbitrary File Upload
N/A
8.8
No date
AccessPress Store
<= 2.4.9
Arbitrary File Upload
N/A
8.8
No date
Zigcy Lite
<= 2.0.9
Arbitrary File Upload
N/A
8.8
No date
Enlighten
<= 1.3.5
Arbitrary File Upload
N/A
8.8
No date
Accesspress Mag
<= 2.6.5
Arbitrary File Upload
N/A
8.8
No date
StoreVilla
<= 1.4.1
Arbitrary File Upload
N/A
8.8
No date
Punte
<= 1.1.2
Arbitrary File Upload
N/A
8.8
No date
Accesspress Basic
<= 3.2.1
Arbitrary File Upload
N/A
8.8
No date
AccessPress Root
<= 2.5
Arbitrary File Upload
N/A
8.8
No date
Construction Lite
<= 1.2.5
Arbitrary File Upload
N/A
8.8
No date
VMagazine Lite
<= 1.3.5
Arbitrary File Upload
N/A
8.8
No date
ParallaxSome
<= 1.3.6
Arbitrary File Upload
N/A
8.8
No date
FotoGraphy
<= 2.4.0
Arbitrary File Upload
N/A
8.8
No date
VMag
<= 1.2.7
Arbitrary File Upload
N/A
8.8
No date
Uncode Lite
<= 1.3.3
Arbitrary File Upload
N/A
8.8
No date
Bingle
<= 1.0.4
Arbitrary File Upload
N/A
8.8
No date
The Launcher
<= 1.3.2
Arbitrary File Upload
N/A
8.8
No date
ScrollMe
<= 2.1.0
Arbitrary File Upload
N/A
8.8
No date
Agency Lite
<= 1.1.6
Arbitrary File Upload
N/A
8.8
No date
Swing Lite
<= 1.1.9
Arbitrary File Upload
N/A
8.8
No date
Vmagazine News
<= 1.0.5
Arbitrary File Upload
N/A
8.8
No date
Bloger
<= 1.2.6
Arbitrary File Upload
N/A
8.8
No date
Revolve
<= 1.3.1
Arbitrary File Upload
N/A
8.8
No date
Ripple
<= 1.2.0
Arbitrary File Upload
N/A
8.8
No date
Zigcy Cosmetics
<= 1.0.5
Arbitrary File Upload
N/A
8.8
No date
The Monday
<= 1.4.1
Arbitrary File Upload
N/A
8.8
No date
Zigcy Baby
<= 1.0.6
Arbitrary File Upload
N/A
8.8
No date
Doko
<= 1.0.27
Arbitrary File Upload
N/A
8.8
No date
Sakala
<= 1.0.4
Arbitrary File Upload
N/A
8.8
No date
PowerPress Podcasting
<= 8.6.1
Cross Site Scripting (XSS)
N/A
4.8
No date
MalCare Security
<= 4.57
Cross Site Scripting (XSS)
N/A
4.8
No date
Contact Form Submissions
<= 1.7
SQL Injection
N/A
4.7
No date
Redux Framework
<= 4.1.20
Cross Site Request Forgery (CSRF)
N/A
5.3
No date
Redux Framework
<= 4.1.20
Bypass Vulnerability
N/A
5.4
No date
Profile Builder Pro
<= 3.3.2
SQL Injection
N/A
8.8
No date
Profile Builder
<= 3.3.2
SQL Injection
N/A
8.8
No date
Media Library Assistant
<= 2.84
SQL Injection
N/A
7.6
No date
Contextual Related Posts
<= 2.9.3
Cross Site Request Forgery (CSRF)
N/A
4.3
No date
Advanced Booking Calendar
<= 1.6.1
SQL Injection
N/A
9.3
No date
HyperComments
<= 1.2.2
Arbitrary File Deletion
N/A
7.2
No date
Woo Import Export
1.0
Arbitrary File Deletion
N/A
N/A
No date
Google Drive for WordPress
<= 2.2
Remote Code Execution (RCE)
N/A
N/A
No date
Simple Events Calendar
<= 1.3.5
SQL Injection
N/A
N/A
No date
Events
<= 2.3.4
SQL Injection
N/A
N/A
No date
Active Directory Integration
<= 1.1.8
SQL Injection
N/A
N/A
No date
JTRT Responsive Tables
4.1
SQL Injection
N/A
N/A
No date
Link Library
<= 5.9.13.26
SQL Injection
N/A
N/A
No date
Ultimate Product Catalogue
4.2.2
SQL Injection
N/A
N/A
No date
ZM Gallery
<= 1.0
SQL Injection
N/A
N/A
No date
WP Private Messages
<= 1.0.1
SQL Injection
N/A
N/A
No date
Xtreme Locator
<= 1.5
SQL Injection
N/A
N/A
No date
ZX CSV Upload
<= 1.0
SQL Injection
N/A
N/A
No date
Single Personal Message
<= 1.0.3
SQL Injection
N/A
N/A
No date
WA Form Builder
<= 1.1
SQL Injection
N/A
N/A
No date
WP Vault
<= 0.8.6.6
Local File Inclusion
N/A
N/A
No date
Product Catalog 8
<= 1.2
SQL Injection
N/A
N/A
No date
Answer My Question
<= 1.3
SQL Injection
N/A
N/A
No date
BBS e-Franchise
<= 1.1.1
SQL Injection
N/A
N/A
No date
Mini Cart
<= 1.00.1
SQL Injection
N/A
N/A
No date
Sirv
<= 1.3.1
SQL Injection
N/A
N/A
No date
FireStorm Shopping Cart
<= 2.07.02
SQL Injection
N/A
N/A
No date
WP Private Messages
<= 1.0
SQL Injection
N/A
N/A
No date
Report vulnerabilities to earn bounties and rewards!
Read more
Include pending
Back to top