← All credits
Mike Gozdiskowski
25 vulnerability records and advisories credit this contributor.
CVE-2026-123751
WP Duplicate <= 1.1.11 - Unauthenticated Arbitrary File Upload via Authentication Bypass
CVE-2026-110506
Page Builder by SiteOrigin < 2.38.0 - Contributor+ Stored XSS via panels_info.class
CVE-2026-92432
Patreon WordPress < 1.10.0 - Open Redirect via 'state' Parameter
CVE-2026-107594
File Upload to Order < 1.1.4 - Unauthenticated Arbitrary File Deletion
CVE-2026-14854
WooCommerce Bookings < 3.11.0 - Unauthenticated Denial of Service
CVE-2026-85573
All in One Files Upload for WooCommerce 2.0.3 - 2.0.16 - Unauthenticated Stored XSS via SVG Upload
CVE-2026-75873
Zella Theme < 2.6.3 - Unauthenticated Arbitrary File Upload
CVE-2026-14321
Divi Dash < 1.0.7 - Unauthenticated Denial of Service via IP Address Spoofing
CVE-2026-82187
WooCommerce Online Product Designer 1.7.0 - < 2.15.0 - Unauthenticated Arbitrary File Upload
CVE-2026-85128
Choose User Role at Registration for WooCommerce < 1.3.3 - Unauthenticated Privilege Escalation via Registration Role Request