Valatty

20252026

Critical

High

Medium

Low

Global Rank

#551

of 3,238 researchers

Vulns

7

Critical0

High2

Medium5

Low0

Affected Assets

5

4plugins1theme

Avg CVSS

6.3

Average score of vulnerabilities

Researcher Submissions

7 records


2026-07-10 16:43	CorvusPay WooCommerce Payment Gateway <= 2.7.4 - Unauthenticated Stored Cross-Site Scripting via 'approval_code' Parameter CorvusPay WooCommerce Payment Gateway <= 2.7.4	`CVE-2026-6939`	7.2 High	Valatty	Yes
2026-07-08 20:43	CorvusPay WooCommerce Payment Gateway <= 2.7.4 - Missing Authorization to Unauthenticated Arbitrary Order Cancellation via 'order_number' Parameter CorvusPay WooCommerce Payment Gateway <= 2.7.4	`CVE-2026-9028`	5.3 Medium	Valatty	Yes
2026-07-08 20:40	CorvusPay WooCommerce Payment Gateway <= 2.7.4 - Unauthenticated Improper Verification of Cryptographic Signature to Payment Bypass via /wp-json/corvuspay/success/ REST Endpoint CorvusPay WooCommerce Payment Gateway <= 2.7.4	`CVE-2026-9027`	5.3 Medium	Valatty	Yes
2026-06-05 14:01	WPForms <= 1.10.0.4 - Unauthenticated Insufficient Verification of Data Authenticity via PayPal Commerce Webhook Endpoint WPForms <= 1.10.0.4	`CVE-2026-7792`	5.3 Medium	Valatty	Yes
2026-06-05 13:37	Click to Chat <= 4.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'num' Shortcode Parameter Click to Chat <= 4.39	`CVE-2026-7795`	6.4 Medium	Valatty	Yes
2025-10-10 20:39	WP Scraper <= 5.8.1 - Authenticated (Administrator+) Server-Side Request Forgery WP Scraper <= 5.8.1	`CVE-2025-9975`	6.8 Medium	Valatty	Yes
2025-07-25 16:30	MinimogWP – The High Converting eCommerce WordPress Theme <= 3.9.0 - Unauthenticated Price Manipulation MinimogWP <= 3.9.0	`CVE-2025-8198`	7.5 High	Valatty	Yes

Showing 1–7 of 7 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C