Lucio Sá

20212022202320242025

Critical

High

Medium

Low

Global Rank

#20

of 3,238 researchers

Vulns

348

Critical21

High77

Medium249

Low1

Affected Assets

331

249plugins82themes

Avg CVSS

6.1

Average score of vulnerabilities

Researcher Submissions

348 records


2025-08-27 00:00	LiquidThemes Themes <= Various Versions - Missing Authorization to Authenticated (Subscriber+) All Plugins Deactivated AI Hub - Startup & Technology WordPress… *	`CVE-2025-0951`	4.3 Medium	Lucio Sá	No
2025-08-15 14:57	School Management System for Wordpress <= 93.2.0 - Unauthenticated SQL Injection School Management System for Wordpress <= 93.2.0	`CVE-2024-12612`	7.5 High	Lucio Sá	No
2025-06-26 00:00	DWT - Directory & Listing WordPress Theme <= 3.3.6 - Unauthenticated Arbitrary User Password Reset DWT - Directory & Listing WordPress The… <= 3.3.6	`CVE-2024-12827`	9.8 Critical	Lucio Sá	Yes
2025-05-07 00:00	Wolmart \| Multi-Vendor Marketplace WooCommerce Theme <= 1.8.11 - Unauthenticated Arbitrary Shortcode Execution in wolmart_loadmore Wolmart <= 1.8.11	`CVE-2024-13793`	7.3 High	Lucio Sá	Yes
2025-05-02 14:13	Motors - Car Dealer, Rental & Listing WordPress theme <= 5.6.65 - Unauthenticated Arbitrary Shortcode Execution Motors - Car Dealer <= 5.6.65	`CVE-2024-13738`	7.3 High	Lucio Sá	Yes
2025-05-01 00:00	Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updates Beyot Framework <= 6.0.6	`CVE-2024-13420`	4.3 Medium	Lucio Sá	No
2025-05-01 00:00	Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting Beyot Framework <= 6.0.6	`CVE-2024-13419`	6.4 Medium	Lucio Sá	No
2025-05-01 00:00	Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload Beyot Framework <= 6.0.6	`CVE-2024-13418`	8.8 High	Lucio Sá	No
2025-04-25 00:00	Anps Theme plugin <= 1.1.1 - Unauthenticated Arbitrary Shortcode Execution Anps Theme plugin <= 1.1.1	`CVE-2024-13812`	6.5 Medium	Lucio Sá	Yes
2025-04-23 19:41	Reales WP - Real Estate WordPress Theme <= 2.1.2 - Missing Authorization to Unauthenticated Attachment Deletion and Favorite Property Updates Reales WP - Real Estate WordPress Theme <= 2.1.2	`CVE-2024-13307`	5.3 Medium	Lucio Sá	No

Showing 1–10 of 348 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C