← All credits
JunHee CHO
22 vulnerability records and advisories credit this contributor.
CVE-2026-107907
MAS Videos <= 1.3.4 - Subscriber+ Arbitrary Post Deletion via delete_video/delete_playlist
CVE-2026-92433
Patreon WordPress < 1.10.0 - Patreon Integration Takeover via CSRF
CVE-2026-92431
Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term Enumeration
CVE-2026-92428
Rede Itaú for WooCommerce < 5.5.3 - Unauthenticated Order Status Manipulation via 3DS Failure Webhook
CVE-2026-92426
YITH WooCommerce Popup < 1.60.0 - Contributor+ Arbitrary Post Meta Deletion
CVE-2026-91076
Robokassa payment for WooCommerce < 1.9.0 - Unauthenticated Arbitrary Order Status Change to Failed
CVE-2026-96900
Cart Abandonment Recovery for WooCommerce < 2.1.4 - Unauthenticated Abandoned Cart Record Deletion and Modification via IDOR
CVE-2026-87968
Product Feed for Google Shopping < 5.3.2 - Unauthenticated Forced Store Registration
CVE-2026-94299
elegro Crypto Payment <= 1.0.1 - Unauthenticated Arbitrary Order Status Change via IPN Callback
CVE-2026-90987
Easy PayPal & Stripe Buy Now Button 1.8 - 2.0.5 - Unauthenticated Payment Amount Manipulation via Client-Supplied Price