← All credits
Asaf Mozes
41 vulnerability records and advisories credit this contributor.
CVE-2025-0470
Forminator <= 1.38.2 - Reflected Cross-Site Scripting via Title Parameter
CVE-2025-3615
Fluent Forms <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-4577
Smash Balloon Custom Facebook Feed <= 4.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-color` Attribute
CVE-2024-2242
Contact Form 7 <= 5.9 - Reflected Cross-Site Scripting
CVE-2025-5096
TablePress <= 3.1.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Parameters
CVE-2025-3479
Forminator <= 1.42.0 - Order Replay Vulnerability
CVE-2025-4479
ElementsKit Lite <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget
CVE-2025-5585
SiteOrigin Widgets Bundle <= 1.68.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-url` DOM Element Attribute
CVE-2025-0215
UpdraftPlus - Backup/Restore <= 1.24.12 - Reflected Cross-Site Scripting
CVE-2025-4566
Elementor <= 3.30.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Path Widget