Pricing
Solutions
WordPress security
Instantly fix and mitigate vulnerabilities
Plugin auditing
Paid auditing for WordPress vendors
Managed VDP
Start a security program for your plugins
Bug Bounty
Join the community and earn bounties
Enterprise API
At scale monitoring and vPatching for hosts
Vulnerability database
The latest WordPress security intelligence
Login
Start trial
stealthcopter
Say thanks
8812.13
XP
300
Reports
1
Reports, last 90 days
#35
17 Nov, 2025
Lvl 9
1
2
3
6
Website
X
GitHub
Sort by
Priority
Severity
Exploited
Search
Affected software | Vulnerability
CVE
AXP
Severity
Reported
Ultimate Addons for WPBakery Page Builder
< 3.21.1
Cross Site Scripting (XSS)
16.82
6.5
Jun 26, 2025
JetEngine
<= 3.7.3
Cross Site Scripting (XSS)
73.13
6.5
No date
Templatera
<= 2.3.0
Cross Site Scripting (XSS)
9.75
6.5
Jul 30, 2025
JetProductGallery
<= 2.2.0.2
Cross Site Scripting (XSS)
19.5
6.5
Jul 27, 2025
JetElements For Elementor
<= 2.7.9
Cross Site Scripting (XSS)
48.75
6.5
Jul 27, 2025
Rentsyst
<= 2.0.100
Cross Site Scripting (XSS)
16.33
7.1
Jun 15, 2025
JetReviews
<= 3.0.0
Local File Inclusion
33.75
7.5
No date
JetWooBuilder
<= 2.1.20.1
Cross Site Scripting (XSS)
43.88
6.5
No date
JetBlog
<= 2.4.4.1
Cross Site Scripting (XSS)
43.88
6.5
No date
JetElements For Elementor
<= 2.7.8
Cross Site Scripting (XSS)
73.13
6.5
No date
JetEngine
<= 3.7.1.2
Cross Site Scripting (XSS)
48.75
6.5
Jul 4, 2025
JetTabs
<= 2.2.9.1
Cross Site Scripting (XSS)
39
6.5
Jul 4, 2025
JetSearch
<= 3.5.10
Cross Site Scripting (XSS)
79.88
7.1
Jun 18, 2025
JetSearch
<= 3.5.10
SQL Injection
209.25
9.3
Jun 17, 2025
JetBlog
<= 2.4.4
Cross Site Scripting (XSS)
27.42
6.5
No date
JetBlocks For Elementor
<= 1.3.18
Cross Site Scripting (XSS)
27.42
6.5
No date
Easy Elementor Addons
<= 2.2.5
Cross Site Scripting (XSS)
5.61
6.5
Jun 25, 2025
JetSmartFilters
<= 3.6.8
Cross Site Scripting (XSS)
9.75
6.5
Jul 4, 2025
JetSearch
<= 3.5.10.1
Cross Site Scripting (XSS)
29.25
6.5
Jul 4, 2025
JetPopup
<= 2.0.15.1
Cross Site Scripting (XSS)
29.25
6.5
Jul 4, 2025
JetPopup
<= 2.0.15
Cross Site Scripting (XSS)
18.28
6.5
Jun 16, 2025
JetTricks
<= 1.5.4.1
Cross Site Scripting (XSS)
18.28
6.5
Jun 14, 2025
JetBlocks For Elementor
<= 1.3.19
Cross Site Scripting (XSS)
29.25
6.5
Jul 4, 2025
JetTabs
<= 2.2.9
Cross Site Scripting (XSS)
24.38
6.5
Jun 14, 2025
JetElements For Elementor
<= 2.7.7
Cross Site Scripting (XSS)
30.47
6.5
Jun 13, 2025
JetWooBuilder
<= 2.1.20
Cross Site Scripting (XSS)
27.42
6.5
No date
JetSmartFilters
<= 3.6.7
Sensitive Data Exposure
8.13
6.5
Jun 14, 2025
JetWooBuilder
<= 2.1.20
Sensitive Data Exposure
24.38
6.5
Jun 14, 2025
JetMenu
<= 2.4.11.1
Sensitive Data Exposure
24.38
6.5
Jun 14, 2025
JetPopup
<= 2.0.15
Sensitive Data Exposure
24.38
6.5
Jun 14, 2025
JetTricks
<= 1.5.4.1
Sensitive Data Exposure
24.38
6.5
Jun 14, 2025
JetBlocks For Elementor
<= 1.3.18
Sensitive Data Exposure
24.38
6.5
Jun 14, 2025
JetTabs
<= 2.2.9
Sensitive Data Exposure
32.5
6.5
Jun 14, 2025
JetEngine
<= 3.7.0
Sensitive Data Exposure
40.63
6.5
Jun 14, 2025
JetElements For Elementor
<= 2.7.7
Sensitive Data Exposure
40.63
6.5
Jun 14, 2025
JetEngine
<= 3.7.0
Remote Code Execution (RCE)
119.53
8.5
Jun 13, 2025
JetEngine
<= 3.7.0
Cross Site Scripting (XSS)
30.47
6.5
Jun 14, 2025
User Meta
<= 3.1.2
Cross Site Scripting (XSS)
14.2
7.1
Apr 3, 2025
BMI Adult & Kid Calculator
<= 1.2.2
Cross Site Scripting (XSS)
14.2
7.1
Apr 3, 2025
Solace Extra
<= 1.3.1
Server Side Request Forgery (SSRF)
4.9
4.9
Apr 4, 2025
Captivate Sync
<= 3.0.3
PHP Object Injection
39.2
9.8
Apr 5, 2025
Fable Extra
<= 1.0.6
Local File Inclusion
58.8
9.8
Apr 14, 2025
affiliate-toolkit
<= 3.7.3
Cross Site Request Forgery (CSRF)
2.7
5.4
Apr 3, 2025
JetReviews
<= 2.3.6
Local File Inclusion
33.75
7.5
Mar 12, 2025
JetElements For Elementor
<= 2.7.4.1
Broken Access Control
150
7.5
Mar 10, 2025
JetBlocks For Elementor
<= 1.3.16
Broken Access Control
90
7.5
Mar 10, 2025
JetWooBuilder
<= 2.1.18
Broken Access Control
90
7.5
Mar 10, 2025
JetElements For Elementor
<= 2.7.4.1
Cross Site Scripting (XSS)
48.75
6.5
Mar 10, 2025
JetTabs
<= 2.2.7
Cross Site Scripting (XSS)
39
6.5
Mar 10, 2025
Royal Elementor Addons
<= 1.3.977
Cross Site Scripting (XSS)
9.75
6.5
Jun 5, 2024
Zephyr Project Manager
<= 3.3.200
Broken Access Control
5.4
5.4
Apr 4, 2025
Essential Addons for Elementor
<= 6.1.9
Sensitive Data Exposure
51.6
4.3
Mar 13, 2025
Essential Addons for Elementor
<= 6.1.9
Cross Site Scripting (XSS)
78
6.5
Mar 13, 2025
Hive Support
<= 1.2.6
Sensitive Data Exposure
15
7.5
Feb 2, 2025
JetMenu
<= 2.4.9
Broken Access Control
90
7.5
Mar 11, 2025
JetBlog
<= 2.4.3
Broken Access Control
90
7.5
Mar 11, 2025
JetTricks
<= 1.5.1
Broken Access Control
90
7.5
Mar 10, 2025
JetPopup
<= 2.0.11
Broken Access Control
90
7.5
Mar 10, 2025
Mobile App for WooCommerce
<= 0.4.59
Cross Site Scripting (XSS)
14.2
7.1
Feb 4, 2025
Eximius
<= 2.2
Arbitrary File Upload
29.7
9.9
Feb 17, 2025
Celestial Aura
<= 2.2
Arbitrary File Upload
29.7
9.9
Feb 17, 2025
JetBlog
<= 2.4.3
Cross Site Scripting (XSS)
29.25
6.5
Mar 11, 2025
JetEngine
<= 3.6.4.1
Cross Site Scripting (XSS)
48.75
6.5
Mar 10, 2025
SpaBiz
<= 1.0.18
Cross Site Scripting (XSS)
4.88
6.5
Oct 23, 2024
JetCompareWishlist
<= 1.5.9
Local File Inclusion
33.75
7.5
Mar 12, 2025
Anant Addons for Elementor
<= 1.1.8
Cross Site Request Forgery (CSRF)
4.8
9.6
Feb 9, 2025
Vite Coupon
<= 1.0.9
Cross Site Request Forgery (CSRF)
15
9.6
Feb 10, 2025
Hive Support
<= 1.2.5
Broken Access Control
13
6.5
Feb 3, 2025
Hive Support
<= 1.2.5
Broken Access Control
6.5
6.5
Feb 3, 2025
Tainá
<= 0.2.2
Cross Site Scripting (XSS)
6.5
6.5
Oct 23, 2024
Glossy Blog
<= 1.0.3
Cross Site Scripting (XSS)
6.5
6.5
Oct 23, 2024
Home Services
<= 1.2.6
Cross Site Scripting (XSS)
6.5
6.5
Oct 23, 2024
Simplish
<= 2.6.4
Cross Site Scripting (XSS)
6.5
6.5
Oct 24, 2024
AI Search Bar
<= 2.1
Cross Site Scripting (XSS)
14.2
7.1
Jan 26, 2025
JetSmartFilters
<= 3.6.3
Cross Site Scripting (XSS)
9.75
6.5
Mar 11, 2025
JetBlocks For Elementor
<= 1.3.16
Cross Site Scripting (XSS)
29.25
6.5
Mar 11, 2025
JetWooBuilder
<= 2.1.18
Local File Inclusion
101.25
7.5
Mar 12, 2025
JetSearch
<= 3.5.7
Cross Site Scripting (XSS)
29.25
6.5
Mar 12, 2025
JetProductGallery
<= 2.1.22
Cross Site Scripting (XSS)
19.5
6.5
Mar 12, 2025
Churel
<= 1.0.8
Cross Site Scripting (XSS)
4.88
6.5
Oct 24, 2024
Unlimited
<= 1.45
Cross Site Scripting (XSS)
4.88
6.5
Oct 24, 2024
AEC Kiosque
<= 1.9.3
Cross Site Scripting (XSS)
14.2
7.1
Feb 4, 2025
Dr. Flex
<= 2.0.0
Cross Site Scripting (XSS)
4.88
6.5
Mar 1, 2025
Happy Addons for Elementor
<= 3.16.2
Cross Site Scripting (XSS)
58.5
6.5
Mar 13, 2025
City Store
<= 1.4.5
Cross Site Scripting (XSS)
4.88
6.5
Oct 24, 2024
RainbowNews
<= 1.0.7
Cross Site Scripting (XSS)
4.88
6.5
Oct 24, 2024
Build
<= 1.0.3
Cross Site Scripting (XSS)
4.88
6.5
Oct 24, 2024
Whitish Lite
<= 2.1.13
Cross Site Scripting (XSS)
4.88
6.5
Oct 24, 2024
MorningTime Lite
<= 1.3.2
Cross Site Scripting (XSS)
4.88
6.5
Oct 24, 2024
StoreBiz
<= 1.0.32
Cross Site Scripting (XSS)
4.88
6.5
Oct 23, 2024
Hester
<= 1.1.10
Cross Site Scripting (XSS)
4.88
6.5
Oct 23, 2024
AuraMart
<= 2.0.7
Cross Site Scripting (XSS)
4.88
6.5
Oct 23, 2024
PluginPass
<= 0.9.10
Arbitrary File Download
25.8
8.6
Oct 6, 2024
WP-Asambleas
<= 2.85.0
Broken Access Control
N/A
4.8
Feb 9, 2025
Elementor Website Builder
<= 3.25.10
Cross Site Scripting (XSS)
65.81
6.5
Sep 1, 2024
Live css
<= 1.3
Cross Site Scripting (XSS)
14.2
7.1
Feb 9, 2025
Shipmozo Courier Tracking
<= 1.0
Cross Site Scripting (XSS)
14.2
7.1
Feb 9, 2025
Disqus Popular Posts
<= 2.1.1
Cross Site Request Forgery (CSRF)
3.55
7.1
Jan 28, 2025
Bug Library
<= 2.1.4
SQL Injection
N/A
8.5
Jan 16, 2025
Multifox
<= 1.3.7
Cross Site Scripting (XSS)
4.88
6.5
Oct 23, 2024
1
2
3
Report vulnerabilities to earn bounties and rewards!
Read more
Include pending
Back to top