← All credits
Jakub Herman
105 vulnerability records and advisories credit this contributor.
CVE-2026-18057
Events Manager < 7.4.1 - Subscriber+ Booking Consent Record Tampering via SQL Injection
CVE-2026-16747
Kirki < 6.2.1 - Unauthenticated Arbitrary Shortcode Execution via Form Email Actions
CVE-2026-15038
InfiniteWP Client < 1.13.6 - Unauthenticated Administrator Account Takeover on Multisite
CVE-2026-18465
WP Maps Pro < 6.1.3 - Unauthenticated Local File Inclusion
CVE-2026-16263
WP Maps < 4.9.7 - Subscriber+ Local File Inclusion
CVE-2026-16258
Ajax Search Lite < 4.14.5 - Unauthenticated PHP Object Injection via Search Statistics REST Endpoint
CVE-2026-15361
Content Views < 4.5 - Subscriber+ SQL Injection via preview_request
CVE-2026-15368
Profile Builder < 3.16.4 - Unauthenticated Account Takeover via Auto-Login After Registration
CVE-2026-15372
WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via Passkeys Provider
CVE-2026-15360
Ajax Load More < 8.0.1 - Unauthenticated SQL Injection via custom_args