Khaled Alenazi (Nxploited)

20252026

Critical

High

Medium

Low

Global Rank

#148

of 3,238 researchers

Vulns

40

Critical9

High16

Medium15

Low0

Affected Assets

40

38plugins2themes

Avg CVSS

7.3

Average score of vulnerabilities

Researcher Submissions

40 records


2026-07-08 19:20	miniOrange OTP Login, Verification and SMS Notifications <= 5.5.1 - Authentication Bypass to Administrator Account Takeover via 'username_b' Parameter miniOrange OTP Login <= 5.5.1	`CVE-2026-14245`	9.8 Critical	Khaled Alenazi (Nxploited)	Yes
2026-04-02 00:00	Order Notification for WooCommerce – Get Audio Alert on new Orders < 3.6.3 - Unauthenticated Remote Code Execution Order Notification for WooCommerce < 3.6.3	`CVE-2025-15484`	9.8 Critical	Khaled Alenazi (Nxploited)	Yes
2026-03-12 00:00	Timetics – Appointment Booking Calendar & Scheduling System < 1.0.52 - Missing Authorization Timetics < 1.0.52	`CVE-2025-15473`	5.3 Medium	Khaled Alenazi (Nxploited)	Yes
2026-03-12 00:00	Datalogics Ecommerce Delivery – Datalogics < 2.6.60 - Unauthenticated Privilege Escalation Datalogics Ecommerce Delivery < 2.6.60	`CVE-2026-2631`	9.8 Critical	Khaled Alenazi (Nxploited)	Yes
2026-03-06 00:00	Restaurant Cafeteria <= 0.4.6 - Missing Authorization to (Subscriber+) Arbitrary Plugin Installation/Activation Restaurant Cafeteria <= 0.4.6	`CVE-2025-15445`	8.8 High	Khaled Alenazi (Nxploited)	No
2026-02-13 00:00	Powerpack for LearnDash <= 1.2.0 - Unauthenticated Arbitrary Options Update PowerPack for LearnDash <= 1.2.0	`CVE-2026-2446`	9.8 Critical	Khaled Alenazi (Nxploited)	Yes
2026-02-12 00:00	Login with Salesforce <= 1.0.2 - Authentication Bypass Login with Salesforce <= 1.0.2	`CVE-2026-2418`	9.8 Critical	Khaled Alenazi (Nxploited)	No
2026-01-22 00:00	Prime Listing Manager <= 1.1 - Unauthenticated Privilege Escalation via Account Takeover Prime Listing Manager <= 1.1	`CVE-2025-14892`	9.8 Critical	Khaled Alenazi (Nxploited)	No
2026-01-20 00:00	Bookingor <= 1.0.12 - Missing Authorization Bookingor <= 1.0.12	`CVE-2025-12573`	4.3 Medium	Khaled Alenazi (Nxploited)	No
2026-01-16 00:00	Post Slides <= 1.0.1 - Authenticated (Contributor+) Local File Inclusion Post Slides <= 1.0.1	`CVE-2025-15491`	7.5 High	Khaled Alenazi (Nxploited)	No

Showing 1–10 of 40 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C