Pricing
Solutions
WordPress security
Instantly fix and mitigate vulnerabilities
Plugin auditing
Paid auditing for WordPress vendors
Managed VDP
Start a security program for your plugins
Bug Bounty
Join the community and earn bounties
Enterprise API
At scale monitoring and vPatching for hosts
Vulnerability database
The latest WordPress security intelligence
Login
Start trial
RE-ALTER
Say thanks
716.23
XP
57
Reports
0
Reports, last 90 days
#16
17 Nov, 2025
Lvl 3
0
0
1
1
Website
X
GitHub
Sort by
Priority
Severity
Exploited
Search
Affected software | Vulnerability
CVE
AXP
Severity
Reported
Cooked Pro
< 1.8.0
Arbitrary File Upload
N/A
10
Jun 27, 2024
Cooked Pro
< 1.8.0
Cross Site Request Forgery (CSRF)
N/A
4.3
Jun 27, 2024
Cooked Pro
< 1.8.0
Cross Site Scripting (XSS)
N/A
6.5
Jun 27, 2024
Filter & Grids
<= 2.9.2
Cross Site Scripting (XSS)
4.88
6.5
Jun 24, 2024
Filter & Grids
<= 2.8.33
Broken Authentication
14.6
7.3
Jun 24, 2024
Cooked
<= 1.7.15.4
Content Injection
N/A
4.3
No date
Cooked
<= 1.7.15.4
Cross Site Request Forgery (CSRF)
N/A
5.4
No date
Blocksy
<= 2.0.22
Cross Site Request Forgery (CSRF)
10.8
5.4
Aug 31, 2023
PeproDev CF7 Database
<= 1.8.0
Cross Site Request Forgery (CSRF)
N/A
4.3
Jul 31, 2023
Blocksy Companion
<= 2.0.28
Cross Site Request Forgery (CSRF)
10.8
5.4
Sep 1, 2023
Favicon
<= 1.3.29
Cross Site Request Forgery (CSRF)
10.75
4.3
Jul 31, 2023
Jobeleon Theme
<= 1.9.1
Cross Site Scripting (XSS)
7.1
7.1
Dec 14, 2022
Database for Contact Form 7
<= 3.0.6
Cross Site Scripting (XSS)
14.2
7.1
Jul 31, 2023
Extensions For CF7
<= 3.0.6
Cross Site Scripting (XSS)
14.2
7.1
Jul 31, 2023
New User Approve
<= 2.5.1
Cross Site Request Forgery (CSRF)
2.15
4.3
Aug 31, 2023
Partdo Core
<= 1.0.9
Cross Site Scripting (XSS)
14.2
7.1
Aug 21, 2023
Bacola Core
<= 1.3.3
Cross Site Scripting (XSS)
14.2
7.1
Aug 21, 2023
Medibazar Core
<= 1.2.3
Cross Site Scripting (XSS)
N/A
7.1
Aug 24, 2023
Furnob Core
<= 1.1.7
Cross Site Scripting (XSS)
N/A
7.1
Aug 24, 2023
Cosmetsy Core
<= 1.3.0
Cross Site Scripting (XSS)
N/A
7.1
Aug 24, 2023
Clotya Core
<= 1.1.5
Cross Site Scripting (XSS)
14.2
7.1
Aug 24, 2023
Clotya
<= 1.1.6
Cross Site Request Forgery (CSRF)
2.15
4.3
Aug 25, 2023
Cosmetsy
<= 1.7.7
Cross Site Request Forgery (CSRF)
N/A
4.3
Aug 25, 2023
Furnob
<= 1.2.2
Cross Site Request Forgery (CSRF)
N/A
4.3
Aug 25, 2023
Bacola
<= 1.3.3
Cross Site Request Forgery (CSRF)
2.15
4.3
Aug 25, 2023
Partdo
<= 1.1.1
Cross Site Request Forgery (CSRF)
2.15
4.3
Aug 25, 2023
Medibazar
<= 1.8.6
Cross Site Request Forgery (CSRF)
N/A
4.3
Aug 25, 2023
Machic
<= 1.2.8
Cross Site Request Forgery (CSRF)
2.15
4.3
Aug 25, 2023
Ultimate Addons for Contact Form 7
<= 3.2.0
Cross Site Scripting (XSS)
14.2
7.1
Jul 31, 2023
Adifier System
< 3.1.4
Local File Inclusion
30
7.5
Aug 21, 2023
Adifier System
< 3.1.4
SQL Injection
27.9
9.3
Aug 21, 2023
Couponis Demo
< 2.2
SQL Injection
27.9
9.3
Aug 21, 2023
Adifier System
< 3.1.4
Cross Site Scripting (XSS)
14.2
7.1
Aug 21, 2023
Machic Core
<= 1.2.6
Cross Site Scripting (XSS)
14.2
7.1
Aug 24, 2023
Database for CF7
<= 1.2.4
Broken Access Control
6.5
6.5
Jul 31, 2023
Chat Bubble
<= 2.4
Cross Site Request Forgery (CSRF)
2.15
4.3
Aug 16, 2023
NextGEN Gallery
<= 3.37
Cross Site Request Forgery (CSRF)
12.9
4.3
Aug 16, 2023
wpDiscuz
<= 7.6.11
Cross Site Request Forgery (CSRF)
6.45
4.3
Jul 27, 2023
wpDiscuz
<= 7.6.11
Cross Site Scripting (XSS)
42.6
7.1
Jul 27, 2023
wpDiscuz
<= 7.6.3
Broken Access Control
12.9
4.3
Aug 31, 2023
Form Maker by 10Web
<= 1.15.18
Cross Site Scripting (XSS)
42.6
7.1
Aug 7, 2023
Form Maker by 10Web
<= 1.15.18
Cross Site Scripting (XSS)
42.6
7.1
Aug 7, 2023
FooGallery
<= 2.2.44
Cross Site Scripting (XSS)
56.8
7.1
Aug 14, 2023
FooGallery
<= 2.2.44
Cross Site Request Forgery (CSRF)
10.8
5.4
Aug 14, 2023
PeproDev CF7 Database
<= 1.7.0
Cross Site Scripting (XSS)
N/A
7.1
Jul 31, 2023
Social Media & Share Icons
<= 2.8.3
Cross Site Scripting (XSS)
71
7.1
Jul 28, 2023
Oxygen Builder
< 4.4
Cross Site Request Forgery (CSRF)
21.6
5.4
Dec 11, 2022
WPJobBoard
<= 5.9.0
SQL Injection
8.6
8.6
Dec 14, 2022
Balkon
<= 1.3.2
Cross Site Scripting (XSS)
N/A
7.1
Jan 31, 2023
WoodMart
<= 7.1.1
Cross Site Request Forgery (CSRF)
8.1
5.4
Feb 14, 2023
TheRoof
<= 1.0.3
Cross Site Scripting (XSS)
N/A
7.1
Jan 31, 2023
Outdoor
<= 3.9.6
Cross Site Scripting (XSS)
N/A
7.1
Jan 31, 2023
Slide Anything
<= 2.4.9
Cross Site Scripting (XSS)
N/A
5.9
No date
Real Estate 7
<= 3.3.4
Broken Access Control
N/A
5.8
No date
Real Estate 7
<= 3.3.4
Cross Site Request Forgery (CSRF)
N/A
4.3
No date
Real Estate 7
<= 3.3.4
Cross Site Scripting (XSS)
N/A
7.1
No date
Real Estate 7
<= 3.3.1
Cross Site Scripting (XSS)
7.1
7.1
Dec 14, 2022
WoodMart
<= 7.0.4
Content Injection
31.8
5.3
Feb 13, 2023
Monolit Theme
<= 2.0.6
Cross Site Scripting (XSS)
7.1
7.1
Jan 31, 2023
JS Help Desk
<= 2.7.1
Broken Access Control
5.4
5.4
Dec 11, 2022
JS Help Desk
<= 2.7.1
Arbitrary File Upload
10
10
Dec 11, 2022
JS Help Desk
<= 2.7.1
Settings Change
9.1
9.1
Dec 11, 2022
JS Help Desk
<= 2.7.1
Cross Site Request Forgery (CSRF)
5.4
5.4
Dec 11, 2022
JS Help Desk
<= 2.7.1
SQL Injection
8.6
8.6
Dec 14, 2022
Smart Slider 3
<= 3.5.1.9
Cross Site Scripting (XSS)
N/A
5.4
No date
Creative Mail
<= 1.5.4
Cross Site Request Forgery (CSRF)
N/A
5.4
No date
SEO Redirection
<= 8.9
Cross Site Request Forgery (CSRF)
N/A
5.4
No date
Image Hover Effects Ultimate
<= 9.7.1
Broken Access Control
N/A
7.2
No date
Quiz And Survey Master
<= 7.3.6
Insecure Direct Object References (IDOR)
N/A
2.7
No date
Quiz And Survey Master
<= 7.3.4
Cross Site Scripting (XSS)
N/A
5.4
No date
Quiz And Survey Master
<= 7.3.4
SQL Injection
N/A
9.1
No date
Accordions
<= 2.0.3
Broken Access Control
N/A
7.2
No date
Analytics Cat
<= 1.0.9
Cross Site Scripting (XSS)
N/A
4.8
No date
Accordions
<= 2.0.3
Cross Site Scripting (XSS)
N/A
3.4
No date
Tabs
<= 3.7.1
Cross Site Scripting (XSS)
N/A
3.4
No date
Awesome Support
<= 6.0.7
Cross Site Scripting (XSS)
N/A
5.4
No date
WHA Crossword
<= 1.1.10
Cross Site Scripting (XSS)
N/A
5.4
No date
Word Search Puzzles game
<= 2.0.1
Cross Site Scripting (XSS)
N/A
5.4
No date
Event Calendar – Calendar
<= 1.4.6
Cross Site Scripting (XSS)
N/A
4.1
No date
SP Project & Document Manager
<= 4.59
Cross Site Scripting (XSS)
N/A
6.1
No date
WPIDE – File Manager & Code Editor
<= 2.6
Arbitrary File Upload
N/A
6.5
No date
Download Manager
<= 3.2.48
Cross Site Request Forgery (CSRF)
N/A
5.4
No date
Download Manager
<= 3.2.48
Cross Site Scripting (XSS)
N/A
5.4
No date
Affiliate For WooCommerce
<= 4.7.0
Insecure Direct Object References (IDOR)
N/A
6.4
No date
Tabs
<= 3.6.0
Broken Access Control
N/A
7.2
No date
Flipbox
<= 2.6.0
Broken Access Control
N/A
7.2
No date
Shortcode Addons
<= 3.1.2
Broken Access Control
N/A
7.2
No date
Team
<= 1.2.6
Cross Site Scripting (XSS)
N/A
4.1
No date
Accordions
<= 2.0.2
Broken Access Control
N/A
9.8
No date
Shortcode Addons
<= 3.0.2
Settings Change
N/A
9.8
No date
WP Maintenance
<= 6.0.7
Cross Site Scripting (XSS)
N/A
3.4
No date
Popup Builder
<= 4.1.0
Cross Site Request Forgery (CSRF)
N/A
5.4
No date
Social Share Buttons by Supsystic
<= 2.2.3
Broken Access Control
N/A
6.3
No date
Social Share Buttons by Supsystic
<= 2.2.3
SQL Injection
N/A
8.5
No date
Image Slider by NextCode
<= 1.1.2
Cross Site Request Forgery (CSRF)
N/A
5.4
No date
Image Slider by NextCode
<= 1.1.2
Cross Site Scripting (XSS)
N/A
4.8
No date
Private Messages For WordPress
<= 2.1.10
Cross Site Request Forgery (CSRF)
N/A
4.3
No date
Code Snippets
<= 2.14.3
Cross Site Scripting (XSS)
N/A
4.7
No date
Code Snippets Extended
<= 1.4.7
Cross Site Request Forgery (CSRF)
N/A
5.4
No date
Code Snippets Extended
<= 1.4.7
Cross Site Request Forgery (CSRF)
N/A
4.7
No date
1
2
3
4
Report vulnerabilities to earn bounties and rewards!
Read more
Include pending
Back to top