← All credits
Jakub Herman
105 vulnerability records and advisories credit this contributor.
CVE-2026-84829
Optimole < 4.2.12 - Unauthenticated Stored XSS via Srcset Descriptor Parameter
CVE-2026-85530
GiveWP < 4.16.8.1 - Unauthenticated Account Takeover via Donor Email Sanitization Mismatch
CVE-2026-19857
Formidable Forms < 6.35 - Unauthenticated Arbitrary Shortcode Execution via [entry_key] Custom HTML Token
CVE-2026-85116
Simple CAPTCHA with Cloudflare Turnstile 1.2.2 - 1.42.1 - Unauthenticated Arbitrary Shortcode Execution via Contact Form 7 Field Repopulation
CVE-2026-82925
Site Reviews 7.2.2 - 8.2.2 - Unauthenticated PHP Object Injection via Form Signature
CVE-2026-85117
Contact Form 7 Captcha 0.1.7 - 0.1.8 - Unauthenticated Arbitrary Shortcode Execution via Form Field Repopulation
CVE-2026-80440
Hustle < 7.8.14.2 - Unauthenticated Arbitrary Shortcode Execution via Success Message Placeholders
CVE-2026-19855
Spam protection, Honeypot, Anti-Spam by CleanTalk < 6.87 - Unauthenticated Arbitrary Shortcode Execution via Comment Text
CVE-2026-18480
SureCart < 4.6.3 - Subscriber+ Administrator Account Takeover
CVE-2026-75793
SureCart < 4.7.0 - Unauthenticated Account Creation with Automatic Login