lucky_buddy

20252026

Critical

High

Medium

Low

Global Rank

#181

of 3,238 researchers

Vulns

29

Critical2

High9

Medium18

Low0

Affected Assets

26

25plugins1theme

Avg CVSS

6.2

Average score of vulnerabilities

Researcher Submissions

29 records


2026-05-28 17:56	OTP Login With Phone Number, OTP Verification <= 1.8.60 - Unauthenticated Authentication Bypass via Firebase OTP Verification OTP Login With Phone Number 1.8.50 – 1.8.60	`CVE-2026-3655`	9.8 Critical	lucky_buddy	Yes
2026-05-26 13:07	Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.11.5 - Unauthenticated Denial of Service Simply Schedule Appointments <= 1.6.11.5	`CVE-2026-7493`	5.3 Medium	lucky_buddy	Yes
2026-04-07 12:49	Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce 13.4.6 - 13.5.2.1 - Cross-Site Request Forgery to Multiple Administrative Actions Product Feed PRO for WooCommerce by AdT… 13.4.6 – 13.5.2.1	`CVE-2026-3499`	8.8 High	lucky_buddy	Yes
2026-02-18 15:08	NewsBlogger <= 0.2.5.6 - 0.2.6.1 - Cross-Site Request Forgery to Arbitrary Plugin Installation NewsBlogger 0.2.5.6 – 0.2.6.1	`CVE-2025-12821`	8.8 High	lucky_buddy	No
2025-12-12 16:10	افزونه پیامک ووکامرس فوق حرفه ای (جدید) payamito sms woocommerce <= 1.3.5 - Unauthenticated Time-Based Blind SQL Injection افزونه پیامک ووکامرس فوق حرفه ای (جدید)… <= 1.3.5	`CVE-2025-13077`	7.5 High	lucky_buddy	No
2025-12-04 17:39	Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification <= 2.0.44 - Authentication Bypass to Account Takeover User Verification by PickPlugins <= 2.0.44	`CVE-2025-12374`	9.8 Critical	lucky_buddy	Yes
2025-12-01 16:23	Export All Posts, Products, Orders, Refunds & Users <= 2.19 - Cross-Site Request Forgery to Sensitive Information Exposure Export All Posts <= 2.19	`CVE-2025-13606`	6.5 Medium	lucky_buddy	Yes
2025-08-28 00:00	Booster for WooCommerce <= 7.2.4 - Unauthenticated Double Extension Arbitrary File Upload Booster for WooCommerce <= 7.2.4	`CVE-2024-13342`	8.1 High	lucky_buddy	Yes
2025-07-16 00:00	Coupon Affiliates <= 6.4.0 - Cross-Site Request Forgery Coupon Affiliates <= 6.4.0	`CVE-2025-54022`	4.3 Medium	lucky_buddy	Yes
2025-07-04 00:00	(Simply) Guest Author Name <= 4.36 - Authenticated (Contributor+) Stored Cross-Site Scripting (Simply) Guest Author Name <= 4.36	`CVE-2025-24764`	6.4 Medium	lucky_buddy	Yes

Showing 1–10 of 29 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C