← All credits
Jakub Herman
105 vulnerability records and advisories credit this contributor.
CVE-2026-113499
LiteSpeed Cache < 7.9.2 - Unauthenticated Stored XSS via CDN Inline CSS Rewriting
CVE-2026-113500
LiteSpeed Cache < 7.9.2 - Unauthenticated Stored XSS via Font Display Optimization
CVE-2026-94267
Advanced Custom Fields: Extended < 0.9.2.8 - Unauthenticated RCE via Front-End Post Update Action
CVE-2026-94268
Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update Action
CVE-2026-109936
Otter Blocks < 3.2.8 - Unauthenticated Stored XSS via Dynamic Content Render Filter
CVE-2026-109987
PixelYourSite (Free & Pro) - Unauthenticated Stored XSS via Cookie
CVE-2026-97328
WebP Express < 0.25.16 - Unauthenticated Stored XSS via Alter HTML Parser
CVE-2026-107506
Simple Banner < 3.3.3 - Authenticated Privilege Escalation via User Permissions Setting
CVE-2026-88784
Weglot < 6.4.3 - Unauthenticated Stored XSS via Translated Page Link Rewriting
CVE-2026-96562
Broken Link Checker <= 2.4.14.1 - Unauthenticated Arbitrary Shortcode Execution via parser_callback