Powpy

20252026

Critical

High

Medium

Low

Global Rank

#157

of 3,213 researchers

Vulns

36

Critical1

High5

Medium30

Low0

Affected Assets

34

34plugins

Avg CVSS

5.7

Average score of vulnerabilities

Researcher Submissions

36 records


2026-06-18 16:09	Appointment Booking Calendar <= 1.4.4 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Booking Field Label Creavi Appointment Booking Calendar <= 1.4.4	`CVE-2026-1856`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2026-02-18 16:21	WP Customer Reviews <= 3.7.5 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter WP Customer Reviews <= 3.7.5	`CVE-2025-14452`	7.2 High	Athiwat Tiprasaharn (Jitlada)	Yes
2026-02-18 00:00	Library Management System <= 3.2.1 - Unauthenticated SQL Injection Library Management System <= 3.2.1	`CVE-2025-12707`	7.5 High	Athiwat Tiprasaharn (Jitlada)	Yes
2026-02-13 18:33	midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File Upload via 'export' AJAX Action midi-Synth <= 1.1.0	`CVE-2026-1306`	9.8 Critical	Athiwat Tiprasaharn (Jitlada)	Yes
2026-01-27 17:21	TableMaster for Elementor <= 1.3.6 - Authenticated (Author+) Server-Side Request Forgery via 'csv_url' Parameter TableMaster for Elementor <= 1.3.6	`CVE-2025-14610`	7.2 High	Athiwat Tiprasaharn (Jitlada)	Yes
2026-01-13 16:43	SearchWiz <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title SearchWiz <= 1.0.0	`CVE-2026-0694`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	No
2026-01-09 00:00	ConvertForce Popup Builder <= 0.0.7 - Stored Cross-Site Scripting via entrance_animation ConvertForce Popup Builder <= 0.0.7	`CVE-2025-14506`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2026-01-08 21:20	Header and Footer Scripts <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Header and Footer Scripts <= 2.3.0	`CVE-2025-11453`	6.4 Medium	Powpy	Yes
2026-01-06 20:39	My Album Gallery <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style_css' Shortcode Attribute My Album Gallery <= 1.0.4	`CVE-2025-14453`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	No
2026-01-06 20:35	QR Code for WooCommerce order emails, PDF invoices, packing slips <= 1.9.42 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode Attributes QR Code for WooCommerce order emails <= 1.9.42	`CVE-2025-14626`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	No

Showing 1–10 of 36 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C