D01EXPLOIT OFFICIAL

2025

Critical

High

Medium

Low

Global Rank

#459

of 3,238 researchers

Vulns

9

Critical1

High1

Medium7

Low0

Affected Assets

8

8plugins

Avg CVSS

5.8

Average score of vulnerabilities

Researcher Submissions

8 records


2025-12-11 14:26	Foxtool All-in-One: Contact chat button, Custom login, Media optimize images <= 2.5.2 - Cross-Site Request Forgery to Google OAuth Connection Foxtool All-in-One <= 2.5.2	`CVE-2025-13408`	4.3 Medium	D01EXPLOIT OFFICIAL	Yes
2025-11-03 15:33	Simple User Capabilities <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation Simple User Capabilities <= 1.0	`CVE-2025-12158`	9.8 Critical	D01EXPLOIT OFFICIAL	No
2025-11-03 15:33	Simple User Capabilities <= 1.0 - Missing Authorization to Unauthenticated Capability Reset Simple User Capabilities <= 1.0	`CVE-2025-12157`	5.3 Medium	D01EXPLOIT OFFICIAL	No
2025-10-29 00:00	AppPresser – Mobile App Framework <= 4.5.0 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposure AppPresser <= 4.5.0	`CVE-2025-11881`	5.3 Medium	D01EXPLOIT OFFICIAL	Yes
2025-10-14 20:02	Content Writer <= 3.6.8 - Unauthenticated Information Exposure via Log File Content Writer <= 3.6.8	`CVE-2025-10486`	5.3 Medium	D01EXPLOIT OFFICIAL	Yes
2025-10-02 21:55	SiteAlert (Formerly WP Health) <= 1.9.8 - Missing Authorization to Unauthenticated Site Health Information Exposure SiteAlert (Formerly WP Health) <= 1.9.8	`CVE-2025-10212`	5.3 Medium	D01EXPLOIT OFFICIAL	No
2025-09-30 00:00	Block For Mailchimp – Easy Mailchimp Form Integration <= 1.1.12 - Unauthenticated Blind Server-Side Request Forgery Block for Mailchimp <= 1.1.12	`CVE-2025-10735`	4.0 Medium	D01EXPLOIT OFFICIAL	Yes
2025-08-22 00:00	Church Admin <= 5.0.26 - Missing Authorization Church Admin <= 5.0.26	`CVE-2025-57896`	5.3 Medium	D01EXPLOIT OFFICIAL	Yes

Showing 1–8 of 8 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C