vgo0

202420252026

Critical

High

Medium

Low

Global Rank

#34

of 3,238 researchers

Vulns

249

Critical5

High13

Medium231

Low0

Affected Assets

247

244plugins3themes

Avg CVSS

6.3

Average score of vulnerabilities

Researcher Submissions

249 records


2026-02-18 15:52	Toret Manager <= 1.2.7 - Authenticated (Subscriber+) Arbitrary Options Update via AJAX actions Toret Manager <= 1.2.7	`CVE-2026-0912`	8.8 High	vgo0	Yes
2026-01-20 11:36	Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeover Academy LMS <= 3.5.0	`CVE-2025-15521`	9.8 Critical	vgo0	Yes
2025-09-18 16:25	Download Manager <= 3.3.23 - Reflected Cross-Site Scripting via `user_ids` Parameter Download Manager <= 3.3.23	`CVE-2025-10146`	6.1 Medium	vgo0	Yes
2025-07-14 15:59	HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload HT Contact Form <= 2.2.1	`CVE-2025-7340`	9.8 Critical	vgo0	Yes
2025-07-14 15:58	HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion HT Contact Form <= 2.2.1	`CVE-2025-7341`	9.1 Critical	vgo0	Yes
2025-03-06 21:30	Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.59 - Cross-Site Request Forgery to Stored Cross-Site Scripting Related Posts By PickPlugins 2.0.59	`CVE-2024-12634`	6.1 Medium	vgo0	Yes
2025-03-06 00:00	UiPress lite \| Effortless custom dashboards, admin themes and pages <= 3.5.04 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update UiPress lite <= 3.5.04	`CVE-2025-1309`	8.8 High	vgo0	Yes
2025-02-28 15:27	SKU Generator for WooCommerce <= 1.6.2 - Reflected Cross-Site Scripting SKU Generator for WooCommerce <= 1.6.2	`CVE-2024-9212`	6.1 Medium	vgo0	Yes
2025-02-27 16:48	User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.0.4 - Reflected Cross-Site Scripting User Registration & Membership <= 4.0.4	`CVE-2025-1511`	6.1 Medium	vgo0	Yes
2025-02-27 16:18	Advanced AJAX Product Filters <= 1.6.8.1 - Reflected Cross-Site Scripting Advanced AJAX Product Filters <= 1.6.8.1	`CVE-2025-1505`	6.1 Medium	vgo0	Yes

Showing 1–10 of 249 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C