Log in Start free

kamleshyadav

Products

ProductCVEsExploitedLatest
WP Lead Capturing Pages4–Jan 22, 2026
Miraculous Core Plugin3–Mar 25, 2026
Miraculous3–Mar 25, 2026
WP Bakery Autoresponder Addon2–Mar 5, 2026
Pixel WordPress Form BuilderPlugin & Autoresponder2–May 23, 2025
Medicalequipment1–Dec 30, 2025
CF7 Auto Responder Addon1–Oct 22, 2025
CF7 7 Mailchimp Add-on1–Jul 4, 2025
Miraculous Elementor1–Feb 20, 2026
PixelPlay1–Sep 22, 2026
RockON DJ1–Oct 22, 2025
Videospirecore Theme Plugin1–Feb 11, 2026
Handily1–Sep 22, 2026
Exit Intent Popup1–Sep 3, 2025
Image Buzz1–Sep 22, 2026

Exploited and recent CVEs

  • CVE-2025-14487 Medium 5.3 Handily <= 1.0.3 - Missing Authorization to Unauthenticated Arbitrary Stripe Payment Settings Modification via 'stripe_publishbale_key' Parameter 0.3%
  • CVE-2025-14484 Medium 5.3 Image Buzz <= 1.0.3 - Missing Authorization to Unauthenticated Arbitrary API Key Modification via 'pixabay_api' Parameter 0.3%
  • CVE-2025-14486 Medium 5.3 PixelPlay <= 1.0.2 - Missing Authorization to Unauthenticated Arbitrary API Key Deletion via 'clear_api_type' Parameter 0.3%
  • CVE-2026-32516 High 8.5 WordPress Miraculous Core Plugin plugin < 2.1.2 - SQL Injection vulnerability 0.3%
  • CVE-2026-32515 High 7.5 WordPress Miraculous theme < 2.1.2 - Broken Access Control vulnerability 0.3%
  • CVE-2026-27363 High 7.1 WordPress WP Bakery Autoresponder Addon plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-27362 Medium 6.5 WordPress WP Bakery Autoresponder Addon plugin <= 1.0.6 - Broken Access Control vulnerability 0.3%
  • CVE-2025-67998 High 8.8 WordPress Miraculous Elementor plugin <= 2.0.7 - Broken Authentication vulnerability 0.4%
  • CVE-2025-15096 High 8.8 Videospirecore Theme Plugin <= 1.0.6 - Authenticated (Subscriber+) Privilege Escalation via User Email Change/Account Takeover 0.4%
  • CVE-2025-49055 Critical 9.3 WordPress WP Lead Capturing Pages plugin <= 2.5 - SQL Injection vulnerability 0.4%
  • CVE-2025-49050 High 8.5 WordPress WP Lead Capturing Pages plugin <= 2.5 - SQL Injection vulnerability 0.4%
  • CVE-2025-69009 Medium 5.3 WordPress Medicalequipment theme <= 1.0.9 - Broken Access Control vulnerability 0.3%
  • CVE-2025-58629 High 7.5 WordPress Miraculous theme < 2.0.9 - Arbitrary Content Deletion vulnerability 0.4%
  • CVE-2025-58627 Critical 9.8 WordPress Miraculous Core Plugin plugin < 2.0.9 - Insecure Direct Object References (IDOR) vulnerability 0.4%
  • CVE-2025-58961 High 7.1 WordPress CF7 Auto Responder Addon plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-53229 High 7.1 WordPress RockON DJ theme <= 3.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-58628 Critical 9.3 WordPress Miraculous Theme < 2.0.9 - SQL Injection Vulnerability 0.3%
  • CVE-2025-58641 Medium 5.4 WordPress Exit Intent Popup Plugin <= 1.0.1 - Server Side Request Forgery (SSRF) Vulnerability 0.2%
  • CVE-2025-49388 Critical 9.8 WordPress Miraculous Core Plugin Plugin <= 2.0.7 - Privilege Escalation Vulnerability 6.6%
  • CVE-2025-31425 High 7.5 WordPress WP Lead Capturing Pages plugin < 2.6 - Arbitrary Content Deletion vulnerability 0.4%
  • CVE-2025-29012 Medium 5.3 WordPress CF7 7 Mailchimp Add-on plugin < 2.4 - Broken Access Control Vulnerability 0.2%
  • CVE-2025-31424 Critical 9.3 WordPress WP Lead Capturing Pages plugin < 2.6 - SQL Injection vulnerability 0.5%
  • CVE-2025-31914 Critical 9.3 WordPress Pixel Form BuilderPlugin & Autoresponder plugin <= 1.0.2 - SQL Injection Vulnerability 0.5%
  • CVE-2025-31915 Medium 5.4 WordPress Pixel Form BuilderPlugin & Autoresponder plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability 0.2%