Benedictus Jovan (aillesiM)

202420252026

Critical

High

Medium

Low

Global Rank

#116

of 3,238 researchers

Vulns

50

Critical0

High1

Medium49

Low0

Affected Assets

37

37plugins

Avg CVSS

4.6

Average score of vulnerabilities

Researcher Submissions

50 records


2026-07-09 20:50	Invoice123 <= 1.7.0 - Missing Authorization to Authenticated (Subscriber+) Setting Modification via s123_submit_api_key & s123_submit_invoice_settings AJAX actions Invoice123 <= 1.7.0	`CVE-2026-9857`	4.3 Medium	Benedictus Jovan (aillesiM)	Yes
2026-06-23 16:40	Generate Security.txt <= 1.0.13 - Missing Authorization to Authenticated (Subscriber+) Security.txt Deletion via delete_securitytxt AJAX Action Generate Security.txt <= 1.0.13	`CVE-2026-9616`	4.3 Medium	Benedictus Jovan (aillesiM)	Yes
2026-06-23 16:40	Reviews and Rating <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via sync_reviews AJAX Action Reviews and Rating <= 1.1.4	`CVE-2026-9619`	4.3 Medium	Benedictus Jovan (aillesiM)	No
2026-06-23 16:40	WhatsOrder <= 1.0.1 - Unauthenticated Sensitive Information Exposure via Predictable Invoice File URLs WhatsOrder <= 1.0.1	`CVE-2026-9612`	5.3 Medium	Benedictus Jovan (aillesiM)	No
2026-06-17 00:00	Cargo Shipping Location for WooCommerce <= 5.6 - Unauthenticated SQL Injection Cargo Shipping Location for WooCommerce <= 5.6	`CVE-2026-54815`	7.5 High	Benedictus Jovan (aillesiM)	Yes
2026-05-27 18:40	PeachPay <= 1.120.46 - Cross-Site Request Forgery to Stripe Unlink PeachPay <= 1.120.46	`CVE-2026-9618`	4.3 Medium	Benedictus Jovan (aillesiM)	Yes
2026-05-09 00:00	AI Product Search for WooCommerce – Motive Commerce Search <= 1.38.2 - Missing Authorization AI Product Search for WooCommerce <= 1.38.2	`CVE-2026-42664`	5.3 Medium	Benedictus Jovan (aillesiM)	Yes
2024-08-28 00:00	WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Task Comments WP To Do <= 1.3.0	`CVE-2024-3944`	4.4 Medium	Benedictus Jovan (aillesiM)	Yes
2024-07-08 20:07	Pricing Table <= 2.0.1 - Cross-Site Request Forgery via ajax() Pricing Table <= 2.0.1	`CVE-2024-4100`	5.3 Medium	Benedictus Jovan (aillesiM)	No
2024-07-08 20:06	Pricing Table <= 2.0.1 - Missing Authorization Pricing Table <= 2.0.1	`CVE-2024-4102`	5.4 Medium	Benedictus Jovan (aillesiM)	No

Showing 1–10 of 50 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C