← All credits
Ryan Kozak
26 vulnerability records and advisories credit this contributor.
CVE-2025-5961
Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload
CVE-2025-6085
Make Connector <= 1.5.10 - Authenticated (Administrator+) Arbitrary File Upload
CVE-2025-13597
AI Feeds <= 1.0.11 - Unauthenticated Arbitrary File Upload
CVE-2025-12189
Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents <= 7.11.1374 - Cross-Site Request Forgery to Arbitrary File Upload
CVE-2025-13595
CIBELES AI <= 1.10.8 - Unauthenticated Arbitrary File Upload
CVE-2025-13380
AI Engine for WordPress: ChatGPT, GPT Content Generator <= 1.0.1 - Authenticated (Contributor+) Arbitrary File Read
CVE-2025-12973
S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator <= 1.7.8 - Authenticated (Editor+) Arbitrary File Upload
CVE-2025-9216
StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2025-12135
WPBookit <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting
CVE-2025-6220
Ultimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'