zaim

202420252026

Critical

High

Medium

Low

Global Rank

#38

of 3,213 researchers

Vulns

228

Critical0

High9

Medium219

Low0

Affected Assets

199

199plugins

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

228 records


2026-07-28 21:22	WPC Badge Management for WooCommerce <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Attribute WPC Badge Management for WooCommerce <= 3.1.6	`CVE-2026-7436`	6.4 Medium	zaim	Yes
2026-07-13 13:11	WP Customer Area <= 8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute WP Customer Area <= 8.3.5	`CVE-2026-7640`	6.4 Medium	zaim	Yes
2026-07-10 17:21	fresh Podcaster <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'freshpodcaster' Shortcode Attributes fresh Podcaster <= 1.0.7	`CVE-2026-1382`	6.4 Medium	zaim	No
2026-07-09 20:51	Jeg Kit for Elementor <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/Widget Jeg Kit for Elementor <= 3.2.6	`CVE-2026-13710`	6.4 Medium	zaim	Yes
2026-07-08 17:50	Bookero.pl <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes Bookero.pl <= 2.2	`CVE-2026-6910`	6.4 Medium	zaim	Yes
2026-07-07 23:10	Website Builder by SeedProd - Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'seedprodnestedmenuwidget' Shortcode Website Builder by SeedProd <= 6.20.2	`CVE-2025-14785`	6.4 Medium	zaim	Yes
2026-07-02 00:00	Structured Content (JSON-LD) #wpsc <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Structured Content (JSON-LD) #wpsc <= 1.7.0	`CVE-2026-57763`	6.4 Medium	zaim	No
2026-07-02 00:00	Mosaic Gallery – Advanced Gallery <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Mosaic Gallery <= 1.2.0	`CVE-2026-57755`	6.4 Medium	zaim	No
2026-07-02 00:00	Surbma \| Yoast SEO Breadcrumb Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Surbma <= 1.2	`CVE-2026-57764`	6.4 Medium	zaim	No
2026-06-30 19:00	LearnPress <= 4.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class_wrapper_form' Shortcode Attribute LearnPress <= 4.4.0	`CVE-2026-12732`	6.4 Medium	zaim	Yes

Showing 1–10 of 228 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C