← All credits
Jonas Benjamin Friedli
130 vulnerability records and advisories credit this contributor.
CVE-2025-12115
WPC Name Your Price for WooCommerce <= 2.1.9 - Unauthenticated Price Alteration
CVE-2025-10144
Perfect Brands for WooCommerce <= 3.6.2 - Authenticated (Contributor+) SQL Injection
CVE-2025-6781
Copymatic – AI Content Writer & Generator <= 2.1 - Cross-Site Request Forgery to Settings Update
CVE-2025-12137
Import WP – Export and Import CSV and XML files to WordPress <= 2.14.16 - Authenticated (Admin+) Arbitrary File Read
CVE-2025-11986
Crypto Tool <= 2.22 - Unauthenticated Information Exposure via Global Authentication State
CVE-2025-10752
OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Cross-Site Request Forgery
CVE-2025-11976
FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) <= 1.1.23.0 - Cross-Site Request Forgery to Sync Rule Creation
CVE-2024-6692
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Agreement Text
CVE-2025-12130
WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors <= 2.6.4 - Cross-Site Request Forgery to Vendor Product Deletion
CVE-2025-10749
Microsoft Azure Storage for WordPress <= 4.5.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Media Deletion