Point Maker

Point Maker has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 7.6, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include PHP Remote File Inclusion.

1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

2 independent researchers contributed these findings, one record each. Point Maker is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSHigh

7.6/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all Point Maker vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2024-12815

Point Maker <= 0.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-03-04 21:06	Point Maker <= 0.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting Point Maker <= 0.1.6	`CVE-2024-12815`	6.4 Medium	zakaria	No
2024-10-15 00:00	Point Maker <= 0.1.4 - Authenticated (Contributor+) Local File Inclusion Point Maker <= 0.1.4	`CVE-2024-49317`	8.8 High	theviper17y	Yes

Showing 1–2 of 2 reports

Plugin Profile

Latestv0.1.8

Point Maker

Author

ZIPANG

0.0(0)

0/100

Last Updated

2026-08-22 (22d ago)

Active Installs

100+

Downloads

6,712

Requires WP

3.9.3+

Requires PHP

5.6.0+

Tested up to

WP 7.1

Created

2020-10-15 (6y ago)

Enclose the main points in a frame to make them stand out. Other Credits This plugin uses some icons from Font Awesome. License – (https://fontawesome.com/license/free) (Icons: CC BY 4.0 License , Fonts: SIL OFL 1.1 License , Code: MIT License)

View on WordPress.org