Moose Love

20252026

Critical

High

Medium

Low

Global Rank

#292

of 3,238 researchers

Vulns

16

Critical0

High5

Medium11

Low0

Affected Assets

14

14plugins

Avg CVSS

5.9

Average score of vulnerabilities

Researcher Submissions

16 records


2026-02-13 18:24	LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.2.5 - Cross-Site Request Forgery Appointment Booking Plugin <= 5.2.5	`CVE-2025-14873`	4.3 Medium	Moose Love	Yes
2026-01-24 04:04	WP Go Maps (formerly WP Google Maps) <= 10.0.04 - Missing Authorization to Authenticated (Subscriber+) Map Engine Setting Modification WP Go Maps <= 10.0.04	`CVE-2026-0593`	5.3 Medium	Moose Love	Yes
2026-01-21 10:40	Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion Photo Gallery by 10Web <= 1.8.36	`CVE-2026-1036`	5.3 Medium	Moose Love	Yes
2025-12-09 16:23	Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File Read Hippoo Mobile App for WooCommerce <= 1.7.1	`CVE-2025-13339`	7.5 High	Moose Love	Yes
2025-12-04 07:28	PostGallery <= 1.12.5 - Authenticated (Subscriber+) Arbitrary File Upload PostGallery <= 1.12.5	`CVE-2025-13543`	8.8 High	Moose Love	No
2025-11-20 19:52	Vitepos – Point of Sale (POS) for WooCommerce <= 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Execution Vitepos <= 3.3.0	`CVE-2025-13156`	8.8 High	Moose Love	Yes
2025-11-20 19:28	Flo Forms – Easy Drag & Drop Form Builder <= 1.0.43 - Unauthenticated Stored Cross-Site Scripting via SVG Upload Flo Forms <= 1.0.43	`CVE-2025-13159`	7.1 High	Moose Love	No
2025-11-13 13:59	SNORDIAN's H5PxAPIkatchu <= 0.4.17 - Unauthenticated Stored Cross-Site Scripting via insert_data SNORDIAN's H5PxAPIkatchu <= 0.4.17	`CVE-2025-12904`	7.2 High	Moose Love	Yes
2025-10-17 00:00	GSpeech TTS – WordPress Text To Speech Plugin <= 3.17.13 - Authenticated (Admin+) SQL injection GSpeech TTS <= 3.17.3	`CVE-2025-10187`	4.9 Medium	Moose Love	Yes
2025-10-10 20:39	WP Links Page <= 4.9.6 - Authenticated (Subscriber+) SQL Injection WP Links Page <= 4.9.6	`CVE-2025-10175`	6.5 Medium	Moose Love	Yes

Showing 1–10 of 16 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C