← All credits

Sawyer

15 vulnerability records and advisories credit this contributor.

CVE-2026-109401

WP Mail Logging <= 1.17.0 - Authenticated (Administrator+) Sensitive Information Exposure in LIKE Wildcard in Personal Data Export Email

CVE-2026-107652

Database Addon for Contact Form 7 <= 1.4.1 - Unauthenticated Limited File Deletion via Injected 'attackcfdb7_file' Submission Field

CVE-2026-107754

GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Image Title

CVE-2026-107645

Blocksy Companion <= 2.1.58 - Unauthenticated Privilege Escalation to 'role' Parameter

CVE-2026-103964

Download Manager <= 3.3.71 - Authenticated (Subscriber+) Sensitive Information Exposure via Email Template Token Injection in 'first_name' Profile Field Token Injection into Suspension Email