thevietronin

202420252026

Critical

High

Medium

Low

Global Rank

#235

of 3,238 researchers

Vulns

20

Critical2

High4

Medium14

Low0

Affected Assets

9

9plugins

Avg CVSS

6.0

Average score of vulnerabilities

Researcher Submissions

20 records


2026-07-27 23:27	Uncanny Automator <= 7.3.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure via Multiple AJAX Endpoints Uncanny Automator <= 7.3.2	`CVE-2026-15025`	7.5 High	thevietronin	Yes
2026-07-27 21:29	Web Directory Free <= 1.7.13 - Unauthenticated SQL Injection Web Directory Free <= 1.7.13	`CVE-2026-14785`	7.5 High	Nhien Pham (nhienit)	No
2026-07-06 16:35	WPFunnels <= 3.12.7 - Unauthenticated Remote Code Execution via 'postData' Parameter WPFunnels <= 3.12.7	`CVE-2026-14345`	9.8 Critical	thevietronin	Yes
2026-06-19 11:05	Branda – White Label & Branding, Free Login Page Customizer <= 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover Branda <= 3.4.29	`CVE-2026-11551`	9.8 Critical	thevietronin	Yes
2026-06-02 00:00	King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder <= 51.1.62 - Authenticated (Subscriber+) Stored Cross-Site Scripting King Addons for Elementor <= 51.1.62	`CVE-2026-48870`	6.4 Medium	thevietronin	Yes
2026-05-17 00:00	Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Authenticated (Subscriber+) Arbitrary File Download Classified Listing <= 5.3.8	`CVE-2026-42679`	4.3 Medium	thevietronin	Yes
2026-05-16 00:00	GiveWP – Donation Plugin and Fundraising Platform <= 4.14.5 - Unauthenticated Stored Cross-Site Scripting GiveWP <= 4.14.5	`CVE-2026-42678`	7.2 High	thevietronin	Yes
2026-05-15 00:00	Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred <= 3.0.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting Points Management System For Gamificati… <= 3.0.4	`CVE-2026-42676`	6.4 Medium	thevietronin	Yes
2025-02-21 00:00	WP Job Portal <= 2.2.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Photo Disconnection WP Job Portal <= 2.2.8	`CVE-2024-13873`	4.3 Medium	thevietronin	Yes
2025-01-31 00:00	WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Arbitrary Resume Download WP Job Portal <= 2.2.6	`CVE-2024-13372`	5.3 Medium	thevietronin	Yes

Showing 1–10 of 20 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C