Asaf Mozes

202420252026

Critical

High

Medium

Low

Global Rank

#146

of 3,238 researchers

Vulns

41

Critical0

High1

Medium40

Low0

Affected Assets

158

156plugins1theme1core

Avg CVSS

6.0

Average score of vulnerabilities

Researcher Submissions

41 records


2026-07-21 20:13	Ultimate Addons for Elementor <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Widget data-toggle-icon/data-close-icon Attributes Ultimate Addons for Elementor <= 2.9.1	`CVE-2026-15787`	6.4 Medium	Asaf Mozes	Yes
2026-07-20 19:35	Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget Essential Addons for Elementor <= 6.6.11	`CVE-2026-15145`	6.4 Medium	Asaf Mozes	Yes
2026-07-20 16:53	WPForms <= 2.0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via OptinMonster Integration data-sitekey Attribute in Post Content WPForms <= 2.0.0.1	`CVE-2026-15782`	4.9 Medium	Asaf Mozes	Yes
2026-04-30 17:17	Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter YASR <= 3.4.12	`CVE-2024-13362`	6.1 Medium	Asaf Mozes	Yes
2026-03-10 00:00	WordPress <= 6.9.1 - Cross-Site Scripting via Client-Side Template Override in Admin Area WordPress 6.9 6.8 – 6.9.1 · 2 branches	`N/A`	4.4 Medium	Asaf Mozes	Yes
2025-12-15 22:04	Elementor <= 3.33.3 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Text Path Elementor Website Builder <= 3.33.3	`CVE-2025-11220`	6.4 Medium	Asaf Mozes	Yes
2025-07-29 07:07	MetForm <= 4.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via `mf-template` DOM Element MetForm <= 4.0.1	`CVE-2025-5684`	6.4 Medium	Asaf Mozes	Yes
2025-07-28 16:22	Elementor <= 3.30.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Path Widget Elementor Website Builder <= 3.30.2	`CVE-2025-4566`	6.4 Medium	Asaf Mozes	Yes
2025-07-08 12:14	Kadence Blocks – Gutenberg Blocks for Page Builder Features <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via `redirectURL` Parameter Kadence Blocks <= 3.5.10	`CVE-2025-5678`	6.4 Medium	Asaf Mozes	Yes
2025-07-03 14:14	Shortcodes Ultimate <= 7.4.0 - Authenticted (Contributor+) Stored Cross-Site Scripting via 'data-url' Attribute Shortcodes Ultimate <= 7.4.0	`CVE-2025-5567`	6.4 Medium	Asaf Mozes	Yes

Showing 1–10 of 41 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C