DityaRA

20252026

Critical

High

Medium

Low

Global Rank

#562

of 3,213 researchers

Vulns

7

Critical0

High2

Medium5

Low0

Affected Assets

6

6plugins

Avg CVSS

5.9

Average score of vulnerabilities

Researcher Submissions

7 records


2026-05-01 15:55	Widgets for Social Photo Feed <= 1.8 - Missing Authentication to Unauthenticated Plugin Settings Access/Update via trustindex_feed_hook_instagram REST API endpoints Widgets for Social Photo Feed <= 1.8	`CVE-2025-14726`	6.5 Medium	DityaRA	Yes
2026-02-18 15:27	CTX Feed – WooCommerce Product Feed Manager <= 6.6.11 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation Product Feed Manager for WooCommerce <= 6.6.11	`CVE-2025-12975`	7.2 High	DityaRA	Yes
2026-01-09 14:05	WooCommerce Square <= 5.1.1 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure in get_token_by_id WooCommerce Square 4.2.0 – < 5.1.2 · 10 branches	`CVE-2025-13457`	7.5 High	DityaRA	Yes
2026-01-08 17:31	weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.1.15 - Unauthenticated Sensitive Information Exposure weDocs <= 2.1.15	`CVE-2025-14574`	5.3 Medium	DityaRA	Yes
2025-11-12 15:37	Survey Maker <= 5.1.9.4 - Missing Authorization to Unauthenticated Information Exposure Survey Maker by AYS <= 5.1.9.4	`CVE-2025-12891`	5.3 Medium	DityaRA	Yes
2025-11-12 14:58	Survey Maker <= 5.1.9.4 - Missing Authorization to Unauthenticated Limited Option Update Survey Maker by AYS <= 5.1.9.4	`CVE-2025-12892`	5.3 Medium	DityaRA	Yes
2025-11-11 00:00	GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.139 - Missing Authorization to Authenticated (Author+) Arbitrary Image Attachment GeoDirectory <= 2.8.139	`CVE-2025-12833`	4.3 Medium	DityaRA	Yes

Showing 1–7 of 7 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C