Webbernaut

2023202420252026

Critical

High

Medium

Low

Global Rank

#33

of 3,238 researchers

Vulns

251

Critical4

High26

Medium221

Low0

Affected Assets

183

176plugins7themes

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

251 records


2026-07-10 14:11	Motors <= 1.4.112 - Unauthenticated Stored Cross-Site Scripting via Comment Content and User Biographical Info Motors <= 1.4.112	`CVE-2026-13114`	7.2 High	Webbernaut	Yes
2026-06-29 18:15	Export User Data <= 2.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion via display_name Field Export User Data <= 2.2.6	`CVE-2026-12240`	8.0 High	Webbernaut	No
2026-06-01 19:48	Tiled Gallery Carousel Without JetPack <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-image-title' Tiled Gallery Carousel Without JetPack <= 3.1	`CVE-2026-5191`	5.4 Medium	Webbernaut	No
2026-05-20 16:21	Avada (Fusion) Builder <= 3.15.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Shortcodes Avada (Fusion) Builder <= 3.15.2	`CVE-2026-1543`	6.4 Medium	Webbernaut	Yes
2026-05-04 22:35	Betheme <= 28.4 - Authenticated (Author+) Arbitrary File Upload to Remote Code Execution via Icon Pack Upload Betheme <= 28.4	`CVE-2026-6261`	8.8 High	Webbernaut	Yes
2026-05-04 21:38	Betheme <= 28.4 - Authenticated (Contributor+) Arbitrary File Deletion via 'mfn-icon-upload' Betheme <= 28.4	`CVE-2026-6262`	6.5 Medium	Webbernaut	Yes
2026-05-04 15:01	WP Carousel Free <= 2.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-caption' Attribute Carousel, Slider, Photo Gallery with Li… <= 2.7.10	`CVE-2026-4665`	6.4 Medium	Webbernaut	Yes
2026-04-15 17:56	Livemesh Addons by Elementor <= 9.0 - Authenticated (Contributor+) Local File Inclusion via Widget Template Parameter Livemesh Addons by Elementor <= 9.0	`CVE-2026-1620`	8.8 High	Webbernaut	No
2026-04-14 12:25	Avada (Fusion) Builder <= 3.15.1 - Authenticated (Subscriber+) Limited Arbitrary WordPress Action Execution Avada (Fusion) Builder <= 3.15.1	`CVE-2026-1509`	5.4 Medium	Webbernaut	Yes
2026-04-14 12:23	Avada (Fusion) Builder <= 3.15.1 - Authenticated (Subscriber+) Sensitive Information Exposure via Insecure Direct Object Reference Avada (Fusion) Builder <= 3.15.1	`CVE-2026-1541`	4.3 Medium	Webbernaut	Yes

Showing 1–10 of 251 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C