Bao - BlueRock

20252026

Critical

High

Medium

Low

Global Rank

#81

of 3,248 researchers

Vulns

81

Critical0

High2

Medium78

Low1

Affected Assets

72

72plugins

Avg CVSS

5.0

Average score of vulnerabilities

Researcher Submissions

80 records


2026-07-22 00:00	WP Go Maps – Google Map, OpenStreetMap, Leaflet Map <= 10.1.05 - Missing Authorization WP Go Maps <= 10.1.05	`CVE-2026-25466`	5.3 Medium	Bao - BlueRock	Yes
2026-07-22 00:00	Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor <= 3.0.5 - Unauthenticated Information Exposure Ultimate Store Kit <= 3.0.5	`CVE-2026-65505`	5.3 Medium	Bao - BlueRock	Yes
2026-06-26 00:00	Bopo – WooCommerce Product Bundle Builder <= 1.1.6 - Unauthenticated Sensitive Information Exposure Bopo <= 1.1.6	`CVE-2026-57664`	5.3 Medium	Bao - BlueRock	Yes
2026-05-26 00:00	E-cab Taxi Booking Manager for Woocommerce <= 2.0.1 - Missing Authorization E-cab Taxi Booking Manager for Woocomme… <= 2.0.1	`CVE-2026-25426`	5.3 Medium	Bao - BlueRock	Yes
2026-05-19 00:00	The Ultimate Video Player For WordPress – by Presto Player <= 4.1.3 - Missing Authorization Presto Player <= 4.1.3	`CVE-2026-45442`	5.3 Medium	Bao - BlueRock	Yes
2026-05-12 00:00	Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.10.1 - Missing Authorization Hustle <= 7.8.10.1	`CVE-2026-25431`	5.3 Medium	Bao - BlueRock	Yes
2026-05-07 00:00	Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 - Missing Authorization Royal Addons for Elementor < 1.7.1053	`CVE-2026-25436`	5.3 Medium	Bao - BlueRock	Yes
2026-03-31 00:00	Royal Elementor Addons <= 1.7.1056 - Missing Authorization Royal Addons for Elementor <= 1.7.1056	`CVE-2026-40763`	5.3 Medium	Bao - BlueRock	Yes
2026-03-28 00:00	Tourfic <= 2.21.4 - Missing Authorization Tourfic <= 2.21.4	`CVE-2026-39543`	5.3 Medium	Bao - BlueRock	Yes
2026-03-26 00:00	Nexter Blocks <= 4.7.0 - Unauthenticated Information Exposure Nexter Blocks <= 4.7.0	`CVE-2026-39516`	5.3 Medium	Bao - BlueRock	Yes

Showing 1–10 of 80 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C