dutafi

20252026

Critical

High

Medium

Low

Global Rank

#157

of 3,238 researchers

Vulns

36

Critical0

High18

Medium18

Low0

Affected Assets

34

32plugins2themes

Avg CVSS

6.5

Average score of vulnerabilities

Researcher Submissions

36 records


2026-07-27 00:00	Message Filter for Contact Form 7 <= 1.6.3.9 - Unauthenticated Stored Cross-Site Scripting Message Filter for Contact Form 7 <= 1.6.3.9	`CVE-2026-65438`	7.2 High	dutafi	Yes
2026-07-23 00:00	Dokan Pro <= 5.0.0 - Unauthenticated Stored Cross-Site Scripting Dokan Pro <= 5.0.0	`CVE-2026-65492`	7.2 High	dutafi	No
2026-07-21 00:00	AffiliateWP <= 2.34.0 - Reflected Cross-Site Scripting AffiliateWP <= 2.34.0	`CVE-2026-57809`	6.1 Medium	dutafi	Yes
2026-07-21 00:00	Easy Form Builder by WhiteStudio – Drag & Drop Form Builder <= 4.0.12 - Unauthenticated Stored Cross-Site Scripting Easy Form Builder by WhiteStudio <= 4.0.12	`CVE-2026-59517`	7.2 High	dutafi	Yes
2026-07-20 00:00	Real Estate Manager Pro <= 12.8.5 - Reflected Cross-Site Scripting Real Estate Manager Pro <= 12.8.5	`CVE-2026-57701`	6.1 Medium	dutafi	Yes
2026-07-20 00:00	Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers <= 3.6.10.1 - Missing Authorization Sunshine Photo Cart <= 3.6.10.1	`CVE-2026-57703`	4.3 Medium	dutafi	Yes
2026-07-16 00:00	Sprout Clients – CRM and Lead Management <= 3.2.3 - Unauthenticated Stored Cross-Site Scripting Sprout Clients <= 3.2.3	`CVE-2026-57428`	7.2 High	dutafi	Yes
2026-07-16 00:00	Download Monitor - WPForms Lock <= 1.0.4 - Unauthenticated Stored Cross-Site Scripting Download Monitor - WPForms Lock <= 1.0.4	`CVE-2026-57427`	7.2 High	dutafi	Yes
2026-07-10 00:00	Breakdance <= 2.7.1 - Unauthenticated Stored Cross-Site Scripting Breakdance <= 2.7.1	`CVE-2026-57735`	7.2 High	dutafi	Yes
2026-07-09 00:00	Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.8.2 - Authenticated (Subscriber+) PHP Object Injection Directorist <= 8.8.2	`CVE-2026-59518`	7.5 High	dutafi	Yes

Showing 1–10 of 36 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C