← All credits
TANG Cheuk Hei
27 vulnerability records and advisories credit this contributor.
CVE-2026-7567
Temporary Login <= 1.0.0 - Authentication Bypass to Account Takeover
CVE-2024-7985
FileOrganizer <= 1.0.9 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2024-7559
File Manager Pro <= 8.3.7 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2024-9546
WPIDE <= 3.4.9 - Unauthenticated Full Path Dislcosure
CVE-2024-8507
File Manager Pro <= 8.3.9 - Cross-Site Request Forgery to Arbitrary File Upload
CVE-2024-8725
Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Upload
CVE-2024-9507
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.15.2 - Authenticated (Administrator+) Improper Input Validation via iconUpload Function to Arbitrary File Read
CVE-2024-7770
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2024-11010
FileOrganizer <= 1.1.4 - Authenticated (Administrator+) Local JavaScript File Inclusion
CVE-2024-8746
File Manager Pro <= 8.3.9 - Unauthenticated Backup File Download and Upload