zer0gh0st

202420252026

Critical

High

Medium

Low

Global Rank

#50

of 3,257 researchers

Vulns

153

Critical0

High15

Medium138

Low0

Affected Assets

110

109plugins1theme

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

153 records


2026-07-23 14:29	MapSVG Lite <= 8.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting MapSVG <= 8.14.0	`CVE-2025-9205`	6.4 Medium	zer0gh0st	Yes
2026-06-09 00:00	Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates <= 2.6.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Parameters Animation Addons for Elementor <= 2.6.7	`CVE-2025-8444`	6.4 Medium	zer0gh0st	No
2026-02-26 18:19	Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Scroller Widget box link Xpro Addons <= 1.4.24	`CVE-2025-14149`	6.4 Medium	zer0gh0st	Yes
2026-02-16 20:31	RSS Aggregator <= 5.0.10 - Reflected Cross-Site Scripting via 'template' Parameter WP RSS Aggregator <= 5.0.10	`CVE-2026-1216`	7.2 High	zer0gh0st	Yes
2026-02-02 17:17	Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget Unlimited Elements For Elementor <= 2.0.1	`CVE-2025-14274`	5.4 Medium	zer0gh0st	Yes
2026-01-27 17:39	WPBITS Addons For Elementor <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting WPBITS Addons For Elementor Page Builder <= 1.8	`CVE-2025-9082`	6.4 Medium	zer0gh0st	Yes
2026-01-13 17:22	Name Directory <= 1.30.3 - Unauthenticated Stored Cross-Site Scripting via Multiple Parameters Name Directory <= 1.30.3	`CVE-2025-15283`	7.2 High	zer0gh0st	Yes
2026-01-13 17:20	GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation <= 1.1.8 - Unauthenticated Stored Cross-Site Scripting Geeky Bot <= 1.1.8	`CVE-2025-15266`	7.2 High	zer0gh0st	Yes
2025-12-22 22:08	Happy Addons for Elementor <= 3.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS Happy Addons for Elementor <= 3.20.3	`CVE-2025-14635`	6.4 Medium	zer0gh0st	Yes
2025-12-20 14:14	Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.5 - Unauthenticated Stored Cross-Site Scripting Five Star Restaurant Reservations <= 2.7.5	`CVE-2025-11496`	6.1 Medium	zer0gh0st	Yes

Showing 1–10 of 153 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C