Poli

20252026

Critical

High

Medium

Low

Global Rank

#348

of 3,213 researchers

Vulns

13

Critical0

High0

Medium13

Low0

Affected Assets

11

11plugins

Avg CVSS

5.3

Average score of vulnerabilities

Researcher Submissions

13 records


2026-04-14 19:45	Katalogportal-pdf-sync Widget <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure via 'katalogportal_shortcodePrinter' AJAX Action Katalogportal-pdf-sync Widget <= 1.0.0	`CVE-2026-3649`	5.3 Medium	Poli	No
2026-04-14 19:45	e-shot <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Form Settings Modification via AJAX e-shot <= 1.0.2	`CVE-2026-3642`	5.3 Medium	Poli	No
2026-04-07 15:25	LTL Freight Quotes – R+L Carriers Edition <= 3.3.13 - Missing Authorization to Unauthenticated Settings Update LTL Freight Quotes <= 3.3.13	`CVE-2026-3646`	5.3 Medium	Poli	Yes
2026-03-20 15:09	e-shot <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via API Token via 'eshot_form_builder_get_account_data' AJAX Action e-shot <= 1.0.2	`CVE-2026-3546`	5.3 Medium	Poli	No
2026-03-20 15:09	Punnel <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Settings Update via 'punnel_save_config' AJAX Action Punnel <= 1.3.1	`CVE-2026-3645`	5.3 Medium	Poli	No
2026-03-20 15:09	Smarter Analytics <= 2.0 - Missing Authorization to Unauthenticated Plugin Settings Reset via 'reset' Parameter Smarter Analytics <= 2.0	`CVE-2026-3570`	5.3 Medium	Poli	No
2026-03-19 19:51	RockPress <= 1.0.17 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via AJAX Actions RockPress <= 1.0.17	`CVE-2026-3550`	5.3 Medium	Poli	Yes
2025-07-28 20:26	Bonanza – WooCommerce Free Gifts Lite <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Opt In Success Bonanza <= 1.0.0	`CVE-2025-6730`	4.3 Medium	Poli	No
2025-07-18 17:11	Vchasno Kasa <= 1.0.3 - Unauthenticated Log File Clearing MORKVA Vchasno Kasa Integration <= 1.0.3	`CVE-2025-6720`	5.3 Medium	Poli	Yes
2025-07-18 00:00	Vchasno Kasa <= 1.0.3 - Missing Authorization to Unauthenticated Invoice Generation MORKVA Vchasno Kasa Integration <= 1.0.3	`CVE-2025-6721`	5.3 Medium	Poli	Yes

Showing 1–10 of 13 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C