type5afe

20252026

Critical

High

Medium

Low

Global Rank

#154

of 3,238 researchers

Vulns

39

Critical0

High7

Medium31

Low1

Affected Assets

34

34plugins

Avg CVSS

5.4

Average score of vulnerabilities

Researcher Submissions

39 records


2026-05-27 17:18	Easy Digital Downloads <= 3.6.7 - Cross-Site Request Forgery to Payment Account Hijacking via 'square_tokens' Parameter Easy Digital Downloads <= 3.6.7	`CVE-2026-7533`	4.3 Medium	type5afe	Yes
2026-05-13 00:00	My Calendar <= 3.7.9 - Authenticated (Custom+) Missing Authorization to Unauthorized Event Publication via 'event_approved' Parameter My Calendar <= 3.7.9	`CVE-2026-7525`	4.3 Medium	type5afe	Yes
2026-05-04 18:43	Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.42 - Unauthenticated SQL Injection via 'inputs' Form Maker by 10Web <= 1.15.42	`CVE-2026-3359`	7.5 High	type5afe	Yes
2026-03-30 21:39	User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Post Author Reassignment via Avatar Field User Profile Builder <= 3.15.5	`CVE-2026-3139`	4.3 Medium	type5afe	Yes
2026-02-25 08:50	The Events Calendar <= 6.15.16 - Improper Authorization to Authenticated (Contributor+) Event/Organizer/Venue Update/Trash via REST API The Events Calendar <= 6.15.16	`CVE-2026-2694`	5.4 Medium	type5afe	Yes
2026-02-17 20:36	User Submitted Posts <= 20260113 - Incorrect Authorization to Unauthenticated Category Restriction Bypass via 'user-submitted-category' Parameter User Submitted Posts <= 20260113	`CVE-2026-2126`	5.3 Medium	type5afe	Yes
2026-02-13 19:48	Modula Image Gallery – Photo Grid & Video Gallery <= 2.13.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post/Page Editing Modula Image Gallery <= 2.13.6	`CVE-2026-1254`	4.3 Medium	type5afe	Yes
2026-02-12 00:17	Customer Reviews for WooCommerce <= 5.97.0 - Unauthenticated Stored Cross-Site Scripting via media[].href Parameter Customer Reviews for WooCommerce <= 5.97.0	`CVE-2026-1316`	7.2 High	type5afe	Yes
2026-02-05 19:33	Code Snippets <= 3.9.4 - Cross-Site Request Forgery to Cloud Snippet Download/Update Actions Code Snippets <= 3.9.4	`CVE-2026-1785`	4.3 Medium	type5afe	Yes
2026-01-30 16:06	Booking Calendar <= 10.14.13 - Missing Authorization to Unauthenticated Booking Details Exposure Booking Calendar <= 10.14.13	`CVE-2026-1431`	5.3 Medium	type5afe	Yes

Showing 1–10 of 39 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C