d.v4n_s3c

2026

Critical

High

Medium

Low

Global Rank

#528

of 3,238 researchers

Vulns

7

Critical0

High5

Medium2

Low0

Affected Assets

6

6plugins

Avg CVSS

7.6

Average score of vulnerabilities

Researcher Submissions

7 records


2026-06-30 21:30	LatePoint <= 5.6.3 - Authenticated (Custom+) Privilege Escalation to Administrator via 'order[customer_id]' Parameter Appointment Booking Plugin <= 5.6.3	`CVE-2026-13228`	8.8 High	d.v4n_s3c	Yes
2026-06-30 15:24	Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'task_search' Parameter Taskbuilder <= 5.0.8	`CVE-2026-12110`	6.5 Medium	d.v4n_s3c	Yes
2026-06-16 00:00	JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint JetEngine <= 3.8.10.1	`CVE-2026-12360`	7.5 High	d.v4n_s3c	Yes
2026-06-15 20:57	LatePoint <= 5.5.1 - Authenticated (Agent+) Privilege Escalation to Administrator via IDOR in OsOrdersController::create_or_update + Unauthenticated Customer-Cabinet Password Reset Appointment Booking Plugin <= 5.5.1	`CVE-2026-8176`	7.5 High	d.v4n_s3c	Yes
2026-05-07 19:58	User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Authenticated (Subscriber+) PHP Object Injection User Frontend <= 4.3.1	`CVE-2026-5127`	8.8 High	d.v4n_s3c	Yes
2026-03-23 10:09	Quiz and Survey Master (QSM) <= 10.3.5 - Authenticated (Contributor+) SQL Injection via 'merged_question' Parameter Quiz and Survey Master (QSM) <= 10.3.5	`CVE-2026-2412`	6.5 Medium	d.v4n_s3c	Yes
2026-03-10 19:14	Appointment Booking Calendar <= 1.6.9.27 - Unauthenticated SQL Injection via 'append_where_sql' Parameter Simply Schedule Appointments <= 1.6.9.27	`CVE-2026-1708`	7.5 High	d.v4n_s3c	Yes

Showing 1–7 of 7 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C