beluga

202320242025

Critical

High

Medium

Low

Global Rank

#89

of 3,213 researchers

Vulns

70

Critical10

High12

Medium48

Low0

Affected Assets

63

63plugins

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

70 records


2025-04-04 00:00	Tockify Events Calendar <= 2.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting Tockify Events Calendar <= 2.2.13	`CVE-2025-32174`	6.4 Medium	beluga	Yes
2024-07-11 00:00	Moloni <= 4.7.4 - Reflected Cross-Site Scripting Moloni <= 4.7.4	`CVE-2024-38694`	6.1 Medium	beluga	Yes
2024-07-09 00:00	ARForms Form Builder <= 1.6.7 - Reflected Cross-Site Scripting Contact Form <= 1.6.7	`CVE-2024-37920`	6.1 Medium	beluga	Yes
2024-06-27 00:00	The Ultimate WordPress Toolkit – WP Extended <= 2.4.7 - Unauthenticated Stored Cross-Site Scripting WP Extended <= 2.4.7	`CVE-2024-37259`	6.1 Medium	beluga	Yes
2024-06-21 00:00	Optinly <= 1.0.18 - Missing Authorization Optinly <= 1.0.18	`CVE-2024-37220`	5.3 Medium	beluga	Yes
2024-06-06 00:00	Newsletters <= 4.9.5 - Reflected Cross-Site Scripting Newsletters <= 4.9.5	`CVE-2024-35718`	6.1 Medium	beluga	Yes
2024-06-03 00:00	WPvivid Backup for MainWP <= 0.9.32 - Reflected Cross-Site Scripting WPvivid Backup for MainWP <= 0.9.32	`CVE-2024-35664`	6.1 Medium	beluga	Yes
2024-05-20 00:00	Crafthemes Demo Import <= 3.3 - Missing Authorization to Arbitrary Plugin Installation Crafthemes Demo Import <= 3.3	`CVE-2024-34800`	8.8 High	beluga	Yes
2024-05-20 00:00	AdFoxly – Ad Manager, AdSense Ads & Ads.txt <= 1.8.5 - Missing Authorization to Unauthenticated Ad Status Update AdFoxly <= 1.8.5	`CVE-2024-34802`	5.3 Medium	Lucio Sá	No
2024-05-06 00:00	Post Grid Master <= 3.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting Post Grid Master <= 3.4.11	`CVE-2024-34390`	5.4 Medium	beluga	Yes

Showing 1–10 of 70 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C