andrea bocchetti

20222023202420252026

Critical

High

Medium

Low

Global Rank

#176

of 3,238 researchers

Vulns

31

Critical6

High6

Medium19

Low0

Affected Assets

26

26plugins

Avg CVSS

6.9

Average score of vulnerabilities

Researcher Submissions

31 records


2026-07-09 13:41	Super Forms <= 6.3.313 - Unauthenticated Arbitrary File Upload via 'data' Parameter (datauristring / value) Super Forms <= 6.3.313	`CVE-2026-14894`	9.8 Critical	andrea bocchetti	Yes
2026-05-12 15:19	Cost Calculator Builder <= 4.0.1 - Unauthenticated Price Manipulation and Insecure Direct Object Reference Cost Calculator Builder <= 4.0.1	`CVE-2025-14755`	5.3 Medium	andrea bocchetti	Yes
2026-05-04 14:32	Royal Addons for Elementor <= 1.7.1056 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter in wpr_update_form_action_meta Royal Addons for Elementor <= 1.7.1056	`CVE-2026-4803`	7.2 High	andrea bocchetti	Yes
2026-04-14 19:59	MetForm Pro <= 3.9.7 - Unauthenticated Payment Amount Manipulation via 'mf-calculation' MetForm Pro <= 3.9.7	`CVE-2026-1782`	5.3 Medium	andrea bocchetti	Yes
2026-04-07 12:55	Elementor Website Builder <= 3.35.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API Elementor Website Builder <= 3.35.5	`CVE-2025-14732`	6.4 Medium	andrea bocchetti	Yes
2026-03-23 00:00	KiviCare – Clinic & Patient Management System (EHR) <= 3.6.16 - Missing Authorization KiviCare <= 3.6.16	`CVE-2026-25034`	5.3 Medium	andrea bocchetti	Yes
2026-03-20 00:00	Spam Protect for Contact Form 7 <= 1.2.9 - Authenticated (Editor+) Arbitrary File Deletion Spam Protect for Contact Form 7 <= 1.2.9	`CVE-2026-32496`	6.5 Medium	andrea bocchetti	Yes
2026-03-09 21:09	MetForm Pro <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting MetForm Pro <= 3.9.6	`CVE-2026-1261`	7.2 High	andrea bocchetti	Yes
2026-02-15 00:00	SureForms <= 2.2.1 - Missing Authorization SureForms <= 2.2.1	`N/A`	5.3 Medium	andrea bocchetti	Yes
2026-02-13 18:17	SureForms – Drag and Drop Form Builder for WordPress <= 2.2.1 - Unauthenticated Stripe Payment Amount Manipulation SureForms <= 2.2.1	`CVE-2026-15288`	7.5 High	andrea bocchetti	Yes

Showing 1–10 of 31 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C