← All credits
Jakub Herman
66 vulnerability records and advisories credit this contributor.
CVE-2026-19453
JetBackup 3.1.7.9 - 3.1.23.3 - Subscriber+ Privilege Escalation via Restore Admin User Selection
CVE-2026-16253
Total Upkeep < 1.17.3 - Unauthenticated Sensitive Data Disclosure and Forced Site Restore via Predictable cron_secret
CVE-2026-78363
MW WP Form < 5.1.5 - Unauthenticated Arbitrary Shortcode Execution via Completion Message Merge Tags
CVE-2026-19423
Ultimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile Forms
CVE-2026-19225
Defender Security < 6.2.0 - Admin+ Network-Wide RCE via Hub Connector on Multisite
CVE-2026-19223
Smush < 4.3.2 - Admin+ Network-Wide RCE via Hub Connector on Multisite
CVE-2026-19092
Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing
CVE-2026-79706
Breeze Cache < 2.5.13 - Unauthenticated File Creation via Cache Path Traversal
CVE-2026-15381
WP Go Maps < 10.1.04 - Unauthenticated SQL Injection via Markers REST filter
CVE-2026-15368
Profile Builder < 3.16.4 - Unauthenticated Account Takeover via Auto-Login After Registration