Thái An

202420252026

Critical

High

Medium

Low

Global Rank

#107

of 3,238 researchers

Vulns

54

Critical12

High22

Medium20

Low0

Affected Assets

45

36plugins9themes

Avg CVSS

7.6

Average score of vulnerabilities

Researcher Submissions

54 records


2026-03-03 00:00	FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More <= 1.4.2 - Unauthenticated Arbitrary File Deletion FormGent <= 1.4.2	`CVE-2026-22460`	9.1 Critical	Thái An	No
2025-10-31 18:15	Service Finder Bookings < 6.1 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover Service Finder Bookings < 6.1	`CVE-2025-6574`	8.8 High	Thái An	Yes
2025-10-30 18:40	Jobmonster - Job Board WordPress Theme <= 4.8.1 - Authentication Bypass Noo JobMonster <= 4.8.1	`CVE-2025-5397`	9.8 Critical	Thái An	Yes
2025-10-21 00:00	Academy LMS Pro <= 3.3.7 - Unauthenticated Privilege Escalation via Social Login Addon Academy LMS Pro <= 3.3.7	`CVE-2025-11086`	8.1 High	Thái An	Yes
2025-10-14 00:00	Case Addons < 1.3.0 - Authenticated (Subscriber+) Arbitrary File Upload Case Addons < 1.3.0	`CVE-2025-62047`	8.8 High	Thái An	Yes
2025-10-03 00:00	JobSearch < 3.0.8 - Unauthenticated PHP Object Injection JobSearch WP Job Board < 3.0.8	`CVE-2025-62025`	8.1 High	Thái An	Yes
2025-10-01 00:00	WooCommerce Vehicle Parts Finder <= 3.7 - Unauthenticated PHP Object Injection WooCommerce Vehicle Parts Finder <= 3.7	`CVE-2025-49380`	8.1 High	Thái An	Yes
2025-09-23 00:00	MultiLoca - WooCommerce Multi Locations Inventory Management <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Options Update via 'wcmlim_settings_ajax_handler' MultiLoca - WooCommerce Multi Locations… <= 4.2.8	`CVE-2025-9054`	9.8 Critical	Thái An	Yes
2025-09-07 00:00	Scape <= 1.5.13 - Unauthenticated PHP Object Injection Scape - Multipurpose WordPress theme <= 1.5.13	`CVE-2025-60213`	8.1 High	Thái An	No
2025-08-25 00:00	Exertio Framework <= 1.3.3 - Authenticated (Subscriber+) SQL Injection Exertio Framework <= 1.3.3	`CVE-2025-49402`	6.5 Medium	Thái An	No

Showing 1–10 of 54 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C