Wordfence Intelligence   >   Vulnerability Researchers   >   Peter Thaleikis

Peter Thaleikis

11
All Time Ranking
533
All Time Discoveries
0
90 Day Published Submissions
6 Mar '26
Last Published Submission

12 Achievements

Learn more about Achievements
Submitted LFI Vulnerability
Submitted LFI Vulnerability
September 30, 2025
Submitted SQLi Vulnerability
Submitted SQLi Vulnerability
July 30, 2025
Submitted 300 Vulnerabilities
Submitted 300 Vulnerabilities
July 21, 2025
Submitted 200 Vulnerabilities
Submitted 200 Vulnerabilities
January 30, 2025
Submitted 100 Vulnerabilities
Submitted 100 Vulnerabilities
November 22, 2024
Submitted 75 Vulnerabilities
Submitted 75 Vulnerabilities
November 14, 2024
Submitted 50 Vulnerabilities
Submitted 50 Vulnerabilities
October 24, 2024
Submitted 25 Vulnerabilities
Submitted 25 Vulnerabilities
September 23, 2024
Submitted XSS Vulnerability
Submitted XSS Vulnerability
September 4, 2024
Submitted 10 Vulnerabilities
Submitted 10 Vulnerabilities
June 25, 2024
Submitted 5 Vulnerabilities
Submitted 5 Vulnerabilities
May 17, 2024
Submitted 1 Vulnerability
Submitted 1 Vulnerability
March 19, 2024
Learn more Learn more about Achievements

Showing 1-20 of 533 Vulnerabilities

Master Slider – Responsive Touch Slider <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2026-48968
May 27, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2026-27421
May 7, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams <= 7.3.20 - Authenticated (Author+) Privilege Escalation
8.8
CVE-2025-8899
Mar 6, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Renden <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title
6.4
CVE-2025-12117
Feb 18, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Drift <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title
6.4
CVE-2025-12116
Feb 18, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Target Video Easy Publish <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via placeholder_img Parameter
6.4
CVE-2025-8072
Jan 27, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
SpiceForms Form Builder <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2025-12178
Jan 13, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Consulting <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-63032
Dec 31, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Melos <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-62136
Dec 31, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Shuttle <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-62137
Dec 31, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Minamaze <= 1.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-62991
Dec 31, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Livemesh Addons for Beaver Builder <= 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-62990
Dec 31, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Responsive Block Control <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-62135
Dec 31, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
WPCal.io <= 0.9.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-66103
Dec 30, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Kingcabs <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via progressbarLayout Parameter
6.4
CVE-2025-7058
Dec 12, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Simple post listing <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2025-12650
Dec 11, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Simple Nivo Slider <= 0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
6.4
CVE-2025-13889
Dec 11, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
TR Timthumb <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
6.4
CVE-2025-13899
Dec 5, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
SurveyFunnel – Survey Plugin for WordPress <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2025-12417
Dec 4, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
SortTable Post <= 4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2025-12649
Nov 26, 2025
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Master Slider – Responsive Touch Slider <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2026-48968 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N May 27, 2026
Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2026-27421 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N May 7, 2026
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams <= 7.3.20 - Authenticated (Author+) Privilege Escalation CVE-2025-8899 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H March 6, 2026
Renden <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title CVE-2025-12117 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N February 18, 2026
Drift <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title CVE-2025-12116 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N February 18, 2026
Target Video Easy Publish <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via placeholder_img Parameter CVE-2025-8072 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 27, 2026
SpiceForms Form Builder <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-12178 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 13, 2026
Consulting <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-63032 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 31, 2025
Melos <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-62136 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 31, 2025
Shuttle <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-62137 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 31, 2025
Minamaze <= 1.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-62991 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 31, 2025
Livemesh Addons for Beaver Builder <= 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-62990 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 31, 2025
Responsive Block Control <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-62135 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 31, 2025
WPCal.io <= 0.9.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-66103 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 30, 2025
Kingcabs <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via progressbarLayout Parameter CVE-2025-7058 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 12, 2025
Simple post listing <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-12650 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 11, 2025
Simple Nivo Slider <= 0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CVE-2025-13889 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 11, 2025
TR Timthumb <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CVE-2025-13899 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 5, 2025
SurveyFunnel – Survey Plugin for WordPress <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-12417 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 4, 2025
SortTable Post <= 4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-12649 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N November 26, 2025

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation