Have you found a vulnerability in a WordPress plugin or theme? Report vulnerabilities in WordPress plugins and themes through our bug bounty program and earn a bounty on all in-scope submissions, while we handle the responsible disclosure process on your behalf.

Wordfence Intelligence > Vulnerability Researchers > Gab

Gab

All Time Ranking

All Time Discoveries

90 Day Published Submissions

N/A

Last Published Submission

Is this you? Register as a researcher today to add more public profile details here!

Showing 1-20 of 91 Vulnerabilities

C9 Blocks <= 1.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-26951

Apr 10, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Administrator Z <= 2025.03.04 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-32187

Apr 4, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Turbo Addons for Elementor <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-32186

Apr 4, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

BWD Elementor Addons <= 4.3.20 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-32189

Apr 4, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

News Element Elementor Blog Magazine <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-32191

Apr 4, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Musician's Pack for Elementor <= 1.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-32190

Apr 4, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Magical Blocks <= 1.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-31844

Apr 1, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Posten <= 0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-31790

Apr 1, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

FancyPost <= 6.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-31875

Apr 1, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

ShopCred <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-31829

Apr 1, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

WPSHARE247 Elementor Addons <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-31813

Apr 1, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Nemesis All-in-One <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-31849

Apr 1, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

mFolio Lite <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-31847

Apr 1, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

HMH Footer Builder For Elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-31749

Apr 1, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Design Blocks <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-31815

Apr 1, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

BlockWheels <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-31817

Apr 1, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Click to Chat – WP Support All-in-One Floating Widget <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-31092

Mar 27, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Easy Elementor Addons <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-26761

Feb 14, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-22644

Feb 3, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Alpha Price Table For Elementor <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-22500

Jan 7, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Title	CVE ID	CVSS	Vector	Date
C9 Blocks <= 1.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2025-26951	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	April 10, 2025
Administrator Z <= 2025.03.04 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2025-32187	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	April 4, 2025
Turbo Addons for Elementor <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2025-32186	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	April 4, 2025
BWD Elementor Addons <= 4.3.20 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2025-32189	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	April 4, 2025
News Element Elementor Blog Magazine <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2025-32191	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	April 4, 2025
Musician's Pack for Elementor <= 1.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2025-32190	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	April 4, 2025
Magical Blocks <= 1.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2025-31844	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	April 1, 2025
Posten <= 0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2025-31790	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	April 1, 2025
FancyPost <= 6.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2025-31875	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	April 1, 2025
ShopCred <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2025-31829	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	April 1, 2025
WPSHARE247 Elementor Addons <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2025-31813	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	April 1, 2025
Nemesis All-in-One <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2025-31849	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	April 1, 2025
mFolio Lite <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2025-31847	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	April 1, 2025
HMH Footer Builder For Elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2025-31749	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	April 1, 2025
Design Blocks <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2025-31815	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	April 1, 2025
BlockWheels <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2025-31817	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	April 1, 2025
Click to Chat – WP Support All-in-One Floating Widget <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2025-31092	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	March 27, 2025
Easy Elementor Addons <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2025-26761	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	February 14, 2025
Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2025-22644	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	February 3, 2025
Alpha Price Table For Elementor <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting	CVE-2025-22500	6.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N	January 7, 2025

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation

Gab

Showing 1-20 of 91 Vulnerabilities

Share this researcher's vulnerability discoveries

Cookie Options

Strictly Necessary

Performance/Analytical

Targeting