0x34rth

20252026

Critical

High

Medium

Low

Global Rank

#138

of 3,238 researchers

Vulns

44

Critical0

High4

Medium40

Low0

Affected Assets

42

42plugins

Avg CVSS

4.9

Average score of vulnerabilities

Researcher Submissions

44 records


2026-03-20 15:20	Survey <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings Survey <= 1.1	`CVE-2026-1247`	4.4 Medium	0x34rth	No
2026-03-20 15:20	Mandatory Field <= 1.6.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings Fields Mandatory Field <= 1.6.8	`CVE-2026-1278`	4.4 Medium	0x34rth	No
2026-03-06 18:49	WP App Bar <= 1.5 - Unauthenticated Stored Cross-Site Scripting via 'app-bar-features' Parameter WP App Bar <= 1.5	`CVE-2026-1074`	7.2 High	0x34rth	No
2026-03-06 18:48	Carta Online <= 2.13.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings Carta Online <= 2.13.0	`CVE-2026-1071`	4.4 Medium	0x34rth	Yes
2026-02-18 16:00	Tennis Court Bookings <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Admin Settings and Calendar Parameters Tennis Court Bookings <= 1.2.7	`CVE-2026-1044`	4.4 Medium	0x34rth	No
2026-02-18 15:59	salavat counter Plugin <= 0.9.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'image_url' Parameter salavat counter Plugin <= 0.9.5	`CVE-2026-1047`	4.4 Medium	0x34rth	No
2026-02-18 15:58	TalkJS <= 0.1.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'welcomeMessage' Parameter TalkJS <= 0.1.15	`CVE-2026-1055`	4.4 Medium	0x34rth	Yes
2026-02-18 15:45	PostmarkApp Email Integrator <= 2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings PostmarkApp Email Integrator <= 2.4	`CVE-2026-1043`	4.4 Medium	0x34rth	Yes
2026-02-13 18:31	User Language Switch <= 1.6.10 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'tab_color_picker_language_switch' Parameter User Language Switch <= 1.6.10	`CVE-2026-0735`	4.4 Medium	0x34rth	No
2026-02-13 18:30	User Language Switch <= 1.6.10 - Authenticated (Administrator+) Server-Side Request Forgery via 'info_language' Parameter User Language Switch <= 1.6.10	`CVE-2026-0745`	5.5 Medium	0x34rth	No

Showing 1–10 of 44 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C