shaman0x01

20242025

Critical

High

Medium

Low

Global Rank

#134

of 3,248 researchers

Vulns

44

Critical7

High11

Medium26

Low0

Affected Assets

33

33plugins

Avg CVSS

7.0

Average score of vulnerabilities

Researcher Submissions

44 records


2025-07-01 14:49	Booking calendar, Appointment Booking System <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id' Booking calendar <= 3.2.17	`CVE-2026-15289`	5.9 Medium	shaman0x01	Yes
2025-04-24 09:45	eForm <= 4.18.0 - Unauthenticated Stored Cross-Site Scripting eForm - WordPress Form Builder <= 4.18.0	`CVE-2025-1294`	7.2 High	shaman0x01	Yes
2025-03-25 22:25	Zapier for WordPress <= 1.5.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via updated_user Function Zapier for WordPress <= 1.5.1	`CVE-2024-13411`	6.4 Medium	shaman0x01	Yes
2025-03-21 19:39	Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 5.2.12 - IP-Spoofing Fluent Forms <= 5.2.12	`CVE-2024-13666`	5.3 Medium	shaman0x01	Yes
2025-03-06 00:00	School Management System for Wordpress <= 92.0.0 - Authenticated (Student+) SQL Injection via 'view-attendance' School Management System for Wordpress <= 92.0.0	`CVE-2024-12609`	6.5 Medium	shaman0x01	Yes
2025-03-06 00:00	School Management System for Wordpress <= 92.0.0 - Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task' School Management System for Wordpress <= 92.0.0	`CVE-2024-12607`	6.5 Medium	shaman0x01	Yes
2025-03-03 19:48	Structured Content (JSON-LD) #wpsc <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_fs_local_business Shortcode Structured Content (JSON-LD) #wpsc <= 1.6.3	`CVE-2025-0512`	6.4 Medium	shaman0x01	Yes
2025-02-18 19:35	WordPress Portfolio Builder – Portfolio Gallery <= 1.1.7 - Missing Authorization to Unauthenticated Portfolio Update WordPress Portfolio Builder <= 1.1.7	`CVE-2024-13231`	5.3 Medium	shaman0x01	No
2025-02-17 00:00	FormCraft - Premium WordPress Form Builder <= 3.9.11 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload FormCraft <= 3.9.11	`CVE-2025-0817`	7.2 High	shaman0x01	Yes
2025-02-11 21:55	Welcart e-Commerce <= 2.11.9 - Unauthenticated Stored Cross-Site Scripting via name Parameter Welcart e-Commerce <= 2.11.9	`CVE-2025-0511`	7.2 High	shaman0x01	Yes

Showing 1–10 of 44 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C