wesley (wcraft)

202420252026

Critical

High

Medium

Low

Global Rank

#22

of 3,238 researchers

Vulns

342

Critical19

High63

Medium259

Low1

Affected Assets

182

179plugins3themes

Avg CVSS

6.7

Average score of vulnerabilities

Researcher Submissions

342 records


2026-07-08 20:45	Divi Torque Lite <= 4.2.3 - Cross-Site Request Forgery to Arbitrary Plugin Installation via 'install_plugin' REST Endpoint Divi Torque Lite <= 4.2.3	`CVE-2026-4275`	8.8 High	wesley (wcraft)	Yes
2026-07-02 21:01	RTMKit <= 2.0.7 - Authenticated (Contributor+) Limited Local File Inclusion via 'template' Parameter RTMKit <= 2.0.7	`CVE-2026-5137`	4.3 Medium	wesley (wcraft)	Yes
2026-06-15 17:15	RTMKit <= 2.0.7 - Authenticated (Contributor+) Missing Authorization to Arbitrary Form Submission Access via 'entries_id' Parameter RTMKit <= 2.0.7	`CVE-2026-5149`	6.5 Medium	wesley (wcraft)	Yes
2026-06-09 20:03	Newsletters <= 4.13 - Unauthenticated SQL Injection via wpmlsubscriber_id Parameter Newsletters <= 4.13	`CVE-2026-3018`	7.5 High	wesley (wcraft)	Yes
2026-04-01 19:07	W3 Total Cache <= 2.9.3 - Unauthenticated Security Token Exposure via User-Agent Header W3 Total Cache <= 2.9.3	`CVE-2026-5032`	7.5 High	wesley (wcraft)	Yes
2026-03-20 15:20	WP-WebAuthn <= 1.3.4 - Unauthenticated Stored Cross-Site Scripting WP-WebAuthn <= 1.3.4	`CVE-2025-13910`	6.1 Medium	wesley (wcraft)	No
2025-12-15 00:00	WPCOM Member <= 1.7.16 - Authentication Bypass via Weak OTP WPCOM Member <= 1.7.16	`CVE-2025-14002`	8.1 High	wesley (wcraft)	Yes
2025-12-11 00:00	Comments – wpDiscuz <= 7.6.39 - Unauthenticated Authentication Bypass Through Account Takeover Comments <= 7.6.39	`CVE-2025-13820`	8.1 High	wesley (wcraft)	Yes
2025-10-27 00:00	W3 Total Cache <= 2.8.12 - Unauthenticated Command Injection W3 Total Cache <= 2.8.12	`CVE-2025-9501`	8.1 High	wesley (wcraft)	Yes
2025-10-10 20:59	GSheetConnector For Gravity Forms <= 1.3.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation GSheetConnector for Gravity Forms <= 1.3.27	`CVE-2025-8593`	8.8 High	wesley (wcraft)	Yes

Showing 1–10 of 342 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C