afnaan

20252026

Critical

High

Medium

Low

Global Rank

#125

of 3,238 researchers

Vulns

46

Critical0

High0

Medium46

Low0

Affected Assets

45

45plugins

Avg CVSS

4.3

Average score of vulnerabilities

Researcher Submissions

46 records


2026-06-29 16:17	Plugin for Google Analytics by IO technologies <= 1.1 - Cross-Site Request Forgery via 'ga_id' Parameter Plugin for Google Analytics by IO techn… <= 1.1	`CVE-2026-8944`	4.3 Medium	afnaan	No
2026-06-08 15:06	WP Meta Sort Posts <= 0.9 - Cross-Site Request Forgery to Plugin Settings Update WP Meta Sort Posts <= 0.9	`CVE-2026-8940`	4.3 Medium	afnaan	No
2026-06-08 15:05	FastPicker, an order picker and order management system (oms) for WooCommerce on steroids <= 1.0.2 - Cross-Site Request Forgery via Settings Save FastPicker <= 1.0.2	`CVE-2026-8904`	4.3 Medium	afnaan	No
2026-06-08 15:05	AJAX Report Comments <= 2.0.4 - Cross-Site Request Forgery to Settings Update AJAX Report Comments <= 2.0.4	`CVE-2026-8902`	4.3 Medium	afnaan	No
2026-06-01 19:43	Tectite Forms <= 1.3 - Cross-Site Request Forgery to Settings Update Tectite Forms <= 1.3	`CVE-2026-9599`	4.3 Medium	afnaan	No
2026-05-26 18:57	MetaMagic SEO Plugin <= 1.6 - Cross-Site Request Forgery to Plugin Settings Update via Settings Page MetaMagic SEO Plugin <= 1.6	`CVE-2026-8942`	4.3 Medium	afnaan	No
2026-05-26 17:23	GoStats for WordPress <= 1.4 - Cross-Site Request Forgery via gostats_manage() Function GoStats for WordPress <= 1.4	`CVE-2026-8943`	4.3 Medium	afnaan	No
2026-05-26 17:23	CDN Linker lite <= 1.3.1 - Cross-Site Request Forgery to Plugin Settings Update CDN Linker lite <= 1.3.1	`CVE-2026-8941`	4.3 Medium	afnaan	No
2026-05-26 17:23	Search Simple Fields <= 0.2 - Cross-Site Request Forgery to Plugin Settings Update Search Simple Fields <= 0.2	`CVE-2026-8939`	4.3 Medium	afnaan	No
2026-05-26 17:23	auto making JSON-LD <= 4.5.3 - Cross-Site Request Forgery to Plugin Certification Settings via Nonce Validation Bypass auto making JSON-LD <= 4.5.3	`CVE-2026-8938`	4.3 Medium	afnaan	No

Showing 1–10 of 46 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C