ch4r0n

20252026

Critical

High

Medium

Low

Global Rank

#69

of 3,238 researchers

Vulns

104

Critical5

High18

Medium80

Low1

Affected Assets

90

90plugins

Avg CVSS

5.8

Average score of vulnerabilities

Researcher Submissions

104 records


2026-04-08 00:00	BackupBliss – Backup & Migration with Free Cloud Storage <= 2.1.1 - Unauthenticated Information Exposure Backup Migration <= 2.1.1	`CVE-2026-39480`	5.3 Medium	ch4r0n	Yes
2025-11-26 16:26	SKT PayPal for WooCommerce <= 1.4 - Unauthenticated Payment Bypass SKT PayPal for WooCommerce <= 1.4	`CVE-2025-7820`	7.5 High	ch4r0n	Yes
2025-10-29 00:00	Popup box <= 5.5.4 - Cross-Site Request Forgery Popup Box <= 5.5.4	`CVE-2025-57931`	4.3 Medium	ch4r0n	Yes
2025-10-02 22:14	Schema Plugin For Divi, Gutenberg & Shortcodes <= 4.3.2 - Authenticated (Contributor+) Object Instantiation Schema Plugin For Divi <= 4.3.2	`CVE-2025-7825`	6.3 Medium	ch4r0n	No
2025-09-22 00:00	Image Hover Effects – Elementor Addon <= 1.4.4 - Missing Authorization Image Hover Effects <= 1.4.4	`CVE-2025-57939`	5.4 Medium	ch4r0n	No
2025-09-09 17:41	Testimonial <= 2.3 - Authenticated (Contributor+) SQL Injection Testimonial <= 2.3	`CVE-2025-7826`	6.5 Medium	ch4r0n	No
2025-08-27 00:00	AfterShip Tracking <= 1.17.17 - Missing Authorization AfterShip Tracking <= 1.17.17	`CVE-2025-58201`	5.3 Medium	ch4r0n	Yes
2025-08-26 00:00	Premium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Download Premium Age Verification / Restriction… <= 3.0.2	`CVE-2025-49403`	7.5 High	ch4r0n	No
2025-08-25 00:00	Pro Bulk Watermark Plugin for WordPress <= 2.0 - Authenticated (Subscriber+) Path Traversal Pro Bulk Watermark Plugin for WordPress <= 2.0	`CVE-2025-4956`	4.3 Medium	ch4r0n	No
2025-08-22 15:52	WP Filter & Combine RSS Feeds <= 0.4 - Missing Authorization to Authenticated (Contributor+) Feed Deletion WP Filter & Combine RSS Feeds <= 0.4	`CVE-2025-7828`	4.3 Medium	ch4r0n	No

Showing 1–10 of 104 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C