← All credits
Jakub Herman
66 vulnerability records and advisories credit this contributor.
CVE-2026-18465
WP Maps Pro < 6.1.3 - Unauthenticated Local File Inclusion
CVE-2026-16263
WP Maps < 4.9.7 - Subscriber+ Local File Inclusion
CVE-2026-16258
Ajax Search Lite < 4.14.5 - Unauthenticated PHP Object Injection via Search Statistics REST Endpoint
CVE-2026-15372
WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via Passkeys Provider
CVE-2026-15361
Content Views < 4.5 - Subscriber+ SQL Injection via preview_request
CVE-2026-15360
Ajax Load More < 8.0.1 - Unauthenticated SQL Injection via custom_args
CVE-2026-15038
InfiniteWP Client < 1.13.6 - Unauthenticated Administrator Account Takeover on Multisite
CVE-2026-74932
WP Fastest Cache 0.9.0.3 - 1.5.0 - Unauthenticated Stored XSS via Host Header Cache Poisoning
CVE-2026-19848
ProfilePress < 4.17.1 - Unauthenticated Arbitrary Shortcode Execution via Display Name
CVE-2026-19718
BlogVault, MalCare and WP Remote 5.16 - 6.62 - Unauthenticated Site Takeover via Connection Key Recovery