← All credits
Jonas Benjamin Friedli
130 vulnerability records and advisories credit this contributor.
CVE-2025-11701
Zip Attachments <= 1.6 - Missing Authorization to Unauthenticated Private And Password-Protected Posts Attachment Disclosure
CVE-2025-11773
Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO <= 2.4.7 - Missing Authorization to Authenticated (Subscriber+) Contract Address Update
CVE-2025-6782
GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via dirGZActiveForm()
CVE-2025-10750
PowerBI Embed Reports <= 1.2.0 - Unauthenticated Sensitive Information Disclosure
CVE-2025-11260
WP Headless CMS Framework <= 1.15 - Unauthenticated Protection Mechanism Bypass
CVE-2025-10056
Task Scheduler <= 1.6.3 - Authenticated (Admin+) Blind Server-Side Request Forgery
CVE-2025-10176
The Hack Repair Guy's Plugin Archiver <= 2.0.4 - Authenticated (Administrator+) Arbitrary File Deletion
CVE-2025-9485
OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()
CVE-2025-6838
Broken Link Notifier <= 1.3.0 - Authenticated (Contributor+) CSV Injection
CVE-2025-11693
Export WP Page to Static HTML & PDF <= 4.3.4 - Unauthenticated Cookie Exposure via Log File