YC_Infosec

202420252026

Critical

High

Medium

Low

Global Rank

#268

of 3,238 researchers

Vulns

17

Critical5

High5

Medium7

Low0

Affected Assets

17

17plugins

Avg CVSS

7.6

Average score of vulnerabilities

Researcher Submissions

17 records


2026-02-04 11:20	Popup builder with Gamification <= 2.2.0 - Unauthenticated SQL Injection via Multiple REST API Endpoints Popup builder with Gamification <= 2.2.0	`CVE-2025-13192`	8.2 High	YC_Infosec	Yes
2025-12-11 15:08	WP User Manager <= 2.9.12 - Authenticated (Subscriber+) Arbitrary File Deletion via 'current_user_avatar' Parameter WP User Manager <= 2.9.12	`CVE-2025-13320`	6.8 Medium	YC_Infosec	Yes
2025-12-03 00:27	Frontend Admin by DynamiApps <= 3.28.20 - Unauthenticated Arbitrary Options Update Frontend Admin by DynamiApps <= 3.28.20	`CVE-2025-13342`	9.8 Critical	YC_Infosec	Yes
2025-12-01 11:27	Cost Calculator Builder <= 3.6.3 - Unauthenticated Arbitrary File Deletion Cost Calculator Builder <= 3.6.3	`CVE-2025-12529`	8.8 High	YC_Infosec	Yes
2025-11-15 15:54	Booking for Appointments and Events Calendar – Amelia <= 1.2.35 - Unauthenticated SQL Injection via search Booking for Appointments and Events Cal… <= 1.2.35	`CVE-2025-12482`	7.5 High	YC_Infosec	Yes
2025-10-31 00:00	wpForo Forum <= 2.4.9 - Authenticated (Susbscriber+) SQL Injection wpForo Forum <= 2.4.9	`CVE-2025-11740`	6.5 Medium	YC_Infosec	Yes
2025-10-23 00:00	MasterStudy LMS <= 3.6.27 - Authenticated (Instructor+) SQL Injection MasterStudy LMS WordPress Plugin <= 3.6.27	`CVE-2025-64366`	6.5 Medium	YC_Infosec	Yes
2025-09-09 00:00	Tutor LMS <= 3.7.4 - Authenticated (Administrator+) SQL Injection Tutor LMS <= 3.7.4	`CVE-2025-58993`	4.9 Medium	YC_Infosec	Yes
2024-08-12 00:00	Compute Links <= 1.2.1 - Unauthenticated Remote File Inclusion Compute Links <= 1.2.1	`CVE-2024-43261`	9.8 Critical	YC_Infosec	No
2024-06-18 00:00	Squeeze <= 1.4 - Authenticated (Admin+) Arbitrary File Upload Squeeze <= 1.4	`CVE-2024-35767`	9.1 Critical	YC_Infosec	Yes

Showing 1–10 of 17 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C