thebaldfatguy

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

thebaldfatguy records in CISA KEV

No thebaldfatguy vulnerabilities are listed in CISA KEV.

1 record

TI-2025-12503 CVE-2025-13681 · GHSA-7254-7x79-hj7p

LOW 23

The BFG Tools – Extension Zipper plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0.7.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00407 Published 2026-02-14 No fix listed CWE-22