chaeyp

2026

Critical

High

Medium

Low

Global Rank

#540

of 3,213 researchers

Vulns

7

Critical0

High3

Medium4

Low0

Affected Assets

7

7plugins

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

7 records


2026-07-10 14:43	Planyo online reservation system <= 3.0 - Unauthenticated Server-Side Request Forgery via 'ulap_url' Parameter Planyo online reservation system <= 3.0	`CVE-2026-3576`	7.2 High	chaeyp	Yes
2026-05-11 19:04	Shortcodely <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'widget_area' Shortcode Attribute Shortcodely <= 1.0.1	`CVE-2026-6913`	6.4 Medium	chaeyp	No
2026-04-14 19:47	Accessibly <= 3.0.3 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via Widget Source Injection via REST API Accessibly <= 3.0.3	`CVE-2026-3643`	7.2 High	chaeyp	No
2026-03-20 15:14	CMS Commander <= 2.288 - Authenticated (Custom+) SQL Injection via 'or_blogname' Parameter CMS Commander <= 2.288	`CVE-2026-3334`	8.8 High	chaeyp	No
2026-03-20 15:10	Appmax <= 1.0.3 - Missing Authorization to Order Status Manipulation and Arbitrary Order Creation via Webhook Endpoint Appmax <= 1.0.3	`CVE-2026-3641`	5.3 Medium	chaeyp	No
2026-03-20 00:00	RepairBuddy <= 4.1132 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification via wc_rep_shop_settings_submission AJAX Action RepairBuddy <= 4.1132	`CVE-2026-3567`	5.3 Medium	chaeyp	Yes
2026-03-06 11:30	Stock Ticker <= 3.26.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Template Stock Ticker <= 3.26.1	`CVE-2026-2722`	4.8 Medium	chaeyp	Yes

Showing 1–7 of 7 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C