← All credits
johska
84 vulnerability records and advisories credit this contributor.
CVE-2025-9286
Appy Pie Connect for WooCommerce <= 1.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via reset_user_password
CVE-2025-9884
Mobile Site Redirect <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVE-2025-10310
Rich Snippet Site Report <= 2.0.0105 - Authenticated (Admin+) SQL Injection
CVE-2025-10041
Flex QR Code Generator <= 1.2.5 - Unauthenticated Arbitrary File Upload
CVE-2025-12590
YSlider <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVE-2025-12589
WP-Walla <= 0.5.3.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVE-2025-11996
Find Unused Images <= 1.0.7 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion
CVE-2026-15286
Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.5.32 - Incorrect Authorization to Authenticated (Contributor+) Post Publication
CVE-2025-14063
SEO Links Interlinking <= 1.7.9.9.1 - Reflected Cross-Site Scripting via 'google_error' Parameter
CVE-2026-0844
Simple User Registration <= 6.7 - Authenticated (Subscriber+) Privilege Escalation via profile_save_field