← All credits
Jonas Benjamin Friedli
130 vulnerability records and advisories credit this contributor.
CVE-2025-10902
Originality.ai AI Checker <= 1.0.15 - Missing Authorization to Authenticated (Subscriber+) Scan Log Deletion via ' ai_scan_result_remove'
CVE-2024-9461
Total Upkeep <= 1.16.6 - Authenticated (Administrator+) Remote Code Execution via Backup Settings
CVE-2025-8783
Contact Manager <= 8.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'title'
CVE-2025-11888
ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution <= 4.8.4 - Incorrect Authorization to Authenticated (Editor+) License Status Update
CVE-2025-10038
Binary MLM Plan <= 3.0 - Unauthenticated Limited Privilege Escalation
CVE-2025-9172
Vibes <= 2.2.0 - Unauthenticated SQL Injection via `resource` Parameter
CVE-2025-6783
GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via emdedSc()
CVE-2025-12021
WP-OAuth <= 0.4.1 - Reflected Cross-Site Scripting
CVE-2025-6787
Smart Docs <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-11454
Specific Content For Mobile – Customize the mobile version without redirections <= 0.5.5 - Authenticated (Contributor+) SQL Injection