shark3y

20252026

Critical

High

Medium

Low

Global Rank

#141

of 3,238 researchers

Vulns

42

Critical4

High16

Medium21

Low1

Affected Assets

41

41plugins

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

42 records


2026-05-04 13:32	Loco Translate <= 2.8.2 - Authenticated (Translator+) Path Traversal to Limited File Read via 'ref' Parameter Loco Translate <= 2.8.2	`CVE-2026-1921`	4.9 Medium	shark3y	Yes
2026-04-17 04:24	WP Customer Area <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Read/Deletion via ajax_attach_file WP Customer Area <= 8.3.4	`CVE-2026-3464`	8.8 High	shark3y	Yes
2026-03-25 17:26	Elementor Website Builder <= 3.35.7 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template Elementor Website Builder <= 3.35.7	`CVE-2026-1206`	4.3 Medium	shark3y	Yes
2026-03-23 16:27	WP DSGVO Tools (GDPR) <= 3.1.38 - Missing Authorization to Unauthenticated Account Destruction of Non-Admin Users WP DSGVO Tools (GDPR) <= 3.1.38	`CVE-2026-4283`	9.1 Critical	shark3y	Yes
2026-03-04 00:00	Membership Plugin – Restrict Content <= 3.2.20 - Unauthenticated Privilege Escalation via 'rcp_level' Membership Plugin <= 3.2.20	`CVE-2026-1321`	8.1 High	shark3y	Yes
2026-02-20 20:58	weMail <= 2.0.7 - Missing Authorization to Unauthenticated Form Deletion weMail <= 2.0.7	`CVE-2025-14339`	6.5 Medium	shark3y	Yes
2026-02-18 16:16	Shield Security: Blocks Bots, Protects Users, and Prevents Security Breaches <= 21.0.9 - Missing Authorization to Authenticated (Subscriber+) Email MFA Update Shield Security <= 21.0.9	`CVE-2025-14427`	4.3 Medium	shark3y	Yes
2026-02-16 16:35	Zarinpal Gateway for WooCommerce <= 5.0.16 - Improper Access Control to Payment Status Update افزونه پرداخت امن زرین‌پال برای ووکامرس… <= 5.0.16	`CVE-2026-2592`	7.7 High	shark3y	Yes
2026-02-13 19:48	Super Page Cache <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting via Activity Log Super Page Cache <= 5.2.2	`CVE-2026-1843`	7.2 High	shark3y	Yes
2026-01-30 16:20	Ajax Load More – Infinite Scroll, Lazy Load & Load More <= 7.8.1 - Incorrect Authorization to Unauthenticated Private/Draft Post Title and Excerpt Exposure Ajax Load More <= 7.8.1	`CVE-2025-15525`	5.3 Medium	shark3y	Yes

Showing 1–10 of 42 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C