Foxyyy

202420252026

Critical

High

Medium

Low

Global Rank

#96

of 3,238 researchers

Vulns

64

Critical31

High24

Medium9

Low0

Affected Assets

52

42plugins10themes

Avg CVSS

8.7

Average score of vulnerabilities

Researcher Submissions

64 records


2026-06-09 20:15	Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation Doctreat Core <= 1.6.8	`CVE-2025-6254`	9.8 Critical	Foxyyy	Yes
2026-03-02 16:05	User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration User Registration & Membership <= 5.1.2	`CVE-2026-1492`	9.8 Critical	Foxyyy	Yes
2025-12-10 12:04	WP CarDealer <= 1.2.16 - Unauthenticated Privilege Escalation WP CarDealer <= 1.2.16	`CVE-2025-13764`	9.8 Critical	Foxyyy	Yes
2025-12-09 13:16	Elated Membership <= 1.2 - Authentication Bypass via Social Login Elated Membership <= 1.2	`CVE-2025-13613`	9.8 Critical	Foxyyy	Yes
2025-11-29 12:14	StreamTube Core <= 4.78 - Unauthenticated Arbitrary User Password Change StreamTube Core <= 4.78	`CVE-2025-13615`	9.8 Critical	Foxyyy	Yes
2025-11-07 15:22	Ovatheme Events Manager <= 1.8.6 - Missing Authorization Ovatheme Events Manager <= 1.8.6	`CVE-2025-7663`	6.5 Medium	Foxyyy	Yes
2025-10-31 16:21	Service Finder Bookings <= 6.0 - Authenticated (Subscriber+) Privilege Escalation via change_candidate_password Service Finder Bookings <= 6.0	`CVE-2025-5949`	8.8 High	Foxyyy	Yes
2025-10-10 00:00	WP Freeio <= 1.2.21 - Unauthenticated Privilege Escalation WP Freeio <= 1.2.21	`CVE-2025-11533`	9.8 Critical	Foxyyy	Yes
2025-10-10 00:00	Ovatheme Events Manager <= 1.8.5 - Unauthenticated Arbitrary File Upload Ovatheme Events Manager <= 1.8.5	`CVE-2025-6553`	9.8 Critical	Foxyyy	Yes
2025-09-18 16:31	Service Finder Bookings <= 6.0 - Unauthenticated Privilege Escalation via claim_business Service Finder Bookings <= 6.0	`CVE-2025-5948`	9.8 Critical	Foxyyy	No

Showing 1–10 of 64 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C