Vinit Lakra

Vinit Lakra is a security researcher credited with 19 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #276 of 3,515 contributors. The disclosure was published in 2025.

Their research concentrates on Cross-Site Scripting, which accounts for 19 of their findings (100%). The average CVSS score across these disclosures is 4.4, peaking at 4.4.

The most affected software includes Advance Food Menu (1), AnyClip Luminous Studio (1), Dialogity Free Live Chat (1), across 19 distinct plugins, themes and core versions in total.

3 of the 19 disclosed issues have a vendor fix, while 16 remain unpatched.

2025

Critical

High

Medium

Low

Global Rank

#276

of 3,515 researchers

Vulns

Critical0

High0

Medium19

Low0

Affected Assets

19plugins

Avg CVSS

4.4

Average score of vulnerabilities

Researcher Submissions

19 records


2025-09-22 00:00	Simple Restaurant Menu <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting Simple Restaurant Menu <= 1.2	`CVE-2025-58647`	4.4 Medium	Vinit Lakra	No
2025-09-22 00:00	Magento 2 WordPress Integration <= 1.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Magento 2 WP Integration <= 1.4.1	`CVE-2025-58669`	4.4 Medium	Vinit Lakra	No
2025-09-22 00:00	eZee Online Hotel Booking Engine <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting eZee Online Hotel Booking Engine <= 1.0.0	`CVE-2025-58661`	4.4 Medium	Vinit Lakra	No
2025-09-22 00:00	Goracash <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Goracash <= 1.1	`CVE-2025-53458`	4.4 Medium	Vinit Lakra	No
2025-09-22 00:00	AnyClip Luminous Studio <= 1.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting AnyClip Luminous Studio <= 1.3.3	`CVE-2025-58271`	4.4 Medium	Vinit Lakra	No
2025-09-22 00:00	Dialogity Free Live Chat <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting Dialogity Free Live Chat <= 1.0.3	`CVE-2025-57912`	4.4 Medium	Vinit Lakra	Yes
2025-09-22 00:00	Gravitate Automated Tester <= 1.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting Gravitate Automated Tester <= 1.4.5	`CVE-2025-58645`	4.4 Medium	Vinit Lakra	No
2025-09-22 00:00	Proof Factor – Social Proof Notifications <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting Proof Factor <= 1.0.5	`CVE-2025-58658`	4.4 Medium	Vinit Lakra	No
2025-09-22 00:00	Mobi2Go <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Mobi2Go <= 1.0.0	`CVE-2025-58646`	4.4 Medium	Vinit Lakra	No
2025-09-22 00:00	SAPO Feed <= 2.4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting SAPO Feed <= 2.4.2	`CVE-2025-53462`	4.4 Medium	Vinit Lakra	Yes

Showing 1–10 of 19 reports