← All credits
JunHee CHO
25 vulnerability records and advisories credit this contributor.
CVE-2026-110516
All in One Visual Composer Addons <= 1.2 - Contributor+ LFI via vca_tabs_style Shortcode Attribute
CVE-2026-92396
Blocks for ShopEngine < 2.4.4 - Contributor+ Stored XSS via gutenova_store_css
CVE-2026-88928
PAYCOMET for WooCommerce 5.36 - 5.45 - Unauthenticated Stored Payment Token Overwrite via Signature Verification Bypass
CVE-2026-107907
MAS Videos <= 1.3.4 - Subscriber+ Arbitrary Post Deletion via delete_video/delete_playlist
CVE-2026-92433
Patreon WordPress < 1.10.0 - Patreon Integration Takeover via CSRF
CVE-2026-92431
Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term Enumeration
CVE-2026-92428
Rede Itaú for WooCommerce < 5.5.3 - Unauthenticated Order Status Manipulation via 3DS Failure Webhook
CVE-2026-92426
YITH WooCommerce Popup < 1.60.0 - Contributor+ Arbitrary Post Meta Deletion
CVE-2026-91076
Robokassa payment for WooCommerce < 1.9.0 - Unauthenticated Arbitrary Order Status Change to Failed
CVE-2026-87968
Product Feed for Google Shopping < 5.3.2 - Unauthenticated Forced Store Registration