NumeX

20252026

Critical

High

Medium

Low

Global Rank

#111

of 3,213 researchers

Vulns

51

Critical2

High9

Medium40

Low0

Affected Assets

51

51plugins

Avg CVSS

5.8

Average score of vulnerabilities

Researcher Submissions

51 records


2026-05-26 15:59	Yoast SEO <= 26.5 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via 'post_id' Parameter Yoast SEO <= 26.5	`CVE-2025-14481`	4.3 Medium	NumeX	Yes
2026-05-07 00:00	bunny.net – WordPress CDN Plugin <= 2.3.6 - Missing Authorization bunny.net <= 2.3.6	`CVE-2025-68049`	4.3 Medium	NumeX	Yes
2026-03-20 00:00	WPJAM Basic <= 6.9.2 - Authenticated (Subscriber+) Arbitrary File Upload WPJAM Basic <= 6.9.2	`CVE-2026-32523`	8.8 High	NumeX	Yes
2026-03-18 00:00	Widget Wrangler <= 2.3.9 - Authenticated (Author+) Remote Code Execution Widget Wrangler <= 2.3.9	`CVE-2026-25447`	8.8 High	NumeX	No
2026-03-17 00:00	Activity Log for WordPress <= 1.2.7 - Missing Authorization Activity Log for WordPress <= 1.2.7	`CVE-2026-24987`	4.3 Medium	NumeX	Yes
2026-03-12 00:00	Mobile App Editor – WordPress to Android App Builder <= 1.3.1 - Authenticated (Editor+) Arbitrary File Upload Mobile App Editor <= 1.3.1	`CVE-2026-27067`	7.2 High	NumeX	No
2026-03-10 00:00	PitchPrint <= 11.1.2 - Unauthenticated Arbitrary File Deletion PitchPrint <= 11.1.2	`CVE-2026-22448`	9.1 Critical	NumeX	Yes
2026-02-23 00:00	WBW Currency Switcher for WooCommerce <= 2.2.5 - Missing Authorization Currency Switcher for WooCommerce by WBW <= 2.2.5	`CVE-2026-32410`	5.3 Medium	NumeX	Yes
2026-02-18 00:00	Aruba HiSpeed Cache <= 3.0.4 - Missing Authorization Aruba HiSpeed Cache <= 3.0.4	`CVE-2026-23545`	5.3 Medium	NumeX	Yes
2026-02-16 00:00	leadlovers forms <= 1.0.2 - Missing Authorization leadlovers forms <= 1.0.2	`CVE-2026-39657`	5.3 Medium	NumeX	No

Showing 1–10 of 51 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C