theviper17y

202420252026

Critical

High

Medium

Low

Global Rank

#29

of 3,238 researchers

Vulns

258

Critical12

High40

Medium206

Low0

Affected Assets

253

253plugins

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

258 records


2026-07-22 20:23	Customer Support Ticket System & Helpdesk <= 6.0.5 - Unauthenticated Code Injection via 'path' Parameter Customer Support Ticket System & Helpde… <= 6.0.5	`CVE-2026-15011`	9.8 Critical	theviper17y	Yes
2026-07-20 09:16	Spectra Gutenberg Blocks <= 2.19.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via uagb/image Block Spectra Legacy <= 2.19.28	`CVE-2026-12900`	6.4 Medium	theviper17y	Yes
2026-07-15 15:16	RPB Chessboard <= 8.1.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content RPB Chessboard <= 8.1.2	`CVE-2026-13042`	7.2 High	theviper17y	Yes
2026-07-02 17:43	RTMKit <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Heading Widget 'Background Text' Parameter RTMKit <= 2.0.7	`CVE-2026-8351`	6.4 Medium	theviper17y	Yes
2026-06-23 16:37	Cincopa video and media plug-in <= 1.163 - Unauthenticated Stored Cross-Site Scripting via cincopa Shortcode in Post Comments Cincopa video and media plug-in <= 1.163	`CVE-2026-10092`	7.2 High	theviper17y	No
2026-06-23 16:36	Email JavaScript Cloak <= 1.03 - Unauthenticated Stored Cross-Site Scripting Email JavaScript Cloak <= 1.03	`CVE-2026-10091`	7.2 High	theviper17y	No
2026-06-08 13:48	FV Flowplayer Video Player <= 7.5.49.7212 - Unauthenticated Stored Cross-Site Scripting via Comment Text FV Flowplayer Video Player <= 7.5.49.7212	`CVE-2026-7556`	7.2 High	stealthcopter	Yes
2026-05-27 18:25	a3 Lazy Load <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Element a3 Lazy Load <= 2.7.6	`CVE-2026-6427`	6.4 Medium	theviper17y	Yes
2026-05-21 19:17	The Plus Addons for Elementor <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributes The Plus Addons for Elementor <= 6.4.11	`CVE-2026-15285`	6.4 Medium	theviper17y	Yes
2026-05-21 16:12	WP Blockade <= 0.9.14 - Reflected Cross-Site Scripting via 'shortcode' Parameter WP Blockade <= 0.9.14	`CVE-2026-3481`	6.1 Medium	theviper17y	No

Showing 1–10 of 258 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C