← All credits
Eunho Kim
9 vulnerability records and advisories credit this contributor.
CVE-2026-100386
Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated Arbitrary File Read via CF7 Field Value in mPDF WriteHTML SVG Parser
CVE-2026-50204
Apache Airflow: Audit-log secrets masker redacts by key name only, persisting connection and Variable secrets in cleartext
CVE-2026-110721
NotificationX <= 3.3.3 - Missing Authorization to Unauthenticated Arbitrary Content Injection via 'nx_id' Parameter on /popup-submit REST Route
CVE-2026-88999
Redux Framework <= 4.5.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion via 'attachment_id' Parameter
CVE-2026-103519
WP Ultimate Review <= 2.4.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_reviw_summery' Parameter
CVE-2026-88944
Tutor LMS <= 4.0.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion via 'lesson_id' Parameter
CVE-2024-5799
CM Pop-Up Banners for WordPress < 1.7.3 - Contributor+ Stored XSS
CVE-2024-3236
Easy Notify Lite < 1.1.33 - Contributor+ Stored XSS
CVE-2024-2640
Watu Quiz < 3.4.1.2 - Author+ Stored XSS