abrahack

202420252026

Critical

High

Medium

Low

Global Rank

#204

of 3,238 researchers

Vulns

25

Critical5

High9

Medium11

Low0

Affected Assets

13

13plugins

Avg CVSS

7.1

Average score of vulnerabilities

Researcher Submissions

25 records


2026-05-28 21:09	Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.271 - Missing Authorization to Unauthenticated Homepage Settings Modification Rank Math SEO <= 1.0.271	`CVE-2025-12714`	5.3 Medium	mikemyers	Yes
2026-03-22 16:26	ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Sensitive Information Exposure ReviewX <= 2.2.12	`CVE-2025-10734`	5.3 Medium	abrahack	Yes
2026-03-22 16:26	ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Limited Remote Code Execution ReviewX <= 2.2.12	`CVE-2025-10679`	7.3 High	abrahack	Yes
2026-03-22 16:26	ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Sensitive Information Exposure to Data Export ReviewX <= 2.2.12	`CVE-2025-10731`	5.3 Medium	abrahack	Yes
2026-03-22 16:23	ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.10 - Incorrect Authorization to Unauthenticated Information Exposure and Data Manipulation ReviewX <= 2.2.10	`CVE-2025-10736`	6.5 Medium	abrahack	Yes
2025-11-20 19:18	UiPress lite <= 3.5.08 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure UiPress lite <= 3.5.08	`CVE-2025-10938`	6.5 Medium	abrahack	No
2025-11-20 19:18	UiPress lite <= 3.5.08 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting UiPress lite <= 3.5.08	`CVE-2025-11003`	6.4 Medium	abrahack	No
2025-02-28 00:00	Authors List <= 2.0.6 - Unauthenticated Arbitrary Shortcode Execution Authors List <= 2.0.6	`CVE-2024-13806`	6.5 Medium	abrahack	Yes
2025-02-21 19:56	IP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init Function IP2Location Country Blocker <= 2.38.8	`CVE-2025-1361`	7.5 High	abrahack	Yes
2025-02-14 00:00	Team – Team Members Showcase Plugin <= 4.4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Update Team <= 4.4.9	`CVE-2024-13439`	4.3 Medium	abrahack	Yes

Showing 1–10 of 25 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C