Hiro

20242025

Critical

High

Medium

Low

Global Rank

#266

of 3,238 researchers

Vulns

18

Critical0

High3

Medium15

Low0

Affected Assets

17

17plugins

Avg CVSS

5.7

Average score of vulnerabilities

Researcher Submissions

18 records


2025-09-22 00:00	Frontend File Manager <= 23.2 - Missing Authorization Frontend File Manager Plugin <= 23.2	`CVE-2025-57921`	5.3 Medium	Hiro	Yes
2025-09-05 00:00	Ninja Charts <= 3.3.5 - Unauthenticated Information Exposure Ninja Charts <= 3.3.5	`CVE-2025-58797`	5.3 Medium	Hiro	Yes
2025-09-03 00:00	Surfer <= 1.6.4.574 - Missing Authorization Surfer <= 1.6.4.574	`CVE-2025-58603`	5.3 Medium	Hiro	Yes
2025-07-28 00:00	Custom API for WP <= 4.2.2 - Authenticated (Subscriber+) Privilege Escalation Custom API for WP <= 4.2.2	`CVE-2025-54049`	8.8 High	Hiro	Yes
2025-07-16 00:00	Custom API for WP <= 4.2.2 - Unauthenticated SQL Injection Custom API for WP <= 4.2.2	`CVE-2025-54048`	7.5 High	Hiro	Yes
2025-07-16 00:00	Webba Booking <= 5.1.20 - Missing Authorization Easy Appointment Booking & Scheduling S… <= 5.1.20	`CVE-2025-54040`	5.3 Medium	Hiro	Yes
2025-06-23 00:00	Trusty Whistleblowing <= 2.0.1 - Missing Authorization Trusty Whistleblowing Solution <= 2.0.1	`CVE-2025-52818`	5.3 Medium	Hiro	Yes
2025-06-19 00:00	App Builder <= 5.5.7 - Missing Authorization App Builder <= 5.5.7	`CVE-2025-49989`	5.3 Medium	Hiro	Yes
2025-06-12 00:00	WP Employee Attendance System <= 3.5 - Authenticated (Administrator+) SQL Injection WP Employee Attendance System <= 3.5	`CVE-2025-28972`	4.9 Medium	Hiro	No
2025-06-05 00:00	HR Management Lite <= 3.7 - Cross-Site Request Forgery HR Management Lite <= 3.7	`CVE-2025-29005`	4.3 Medium	Hiro	Yes

Showing 1–10 of 18 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C