Chiao-Lin Yu (Steven Meow)

Chiao-Lin Yu (Steven Meow) is a security researcher credited with 17 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #290 of 3,515 contributors. The disclosure was published in 2026.

Their research concentrates on Missing Authorization, which accounts for 3 of their findings (18%). Other recurring categories include Path Traversal, SQL Injection. The average CVSS score across these disclosures is 6.4, peaking at 9.8. Severity breakdown: 2 critical and 3 high.

The most affected software includes Appointment Booking Plugin (2), EmailKit (2), Database for Contact Form 7 (1), across 15 distinct plugins, themes and core versions in total.

14 of the 17 disclosed issues have a vendor fix, while 3 remain unpatched. The most severe finding, "WebStack <= 1.2024 - Unauthenticated Arbitrary File Upload", scores 9.8 out of 10.

2026
Critical
High
Medium
Low
Global Rank

#290

of 3,515 researchers

Vulns

17

Critical2
High3
Medium12
Low0
Affected Assets

15

14plugins1theme
Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

17 records
2026-07-29 14:21CVE-2026-1982
5.3
Medium
Chiao-Lin Yu (Steven Meow)Yes
2026-07-27 21:19CVE-2026-5114
4.9
Medium
Chiao-Lin Yu (Steven Meow)Yes
2026-05-26 17:35CVE-2026-3279
6.5
Medium
Chiao-Lin Yu (Steven Meow)No
2026-04-24 00:00CVE-2026-4106
5.3
Medium
Chiao-Lin Yu (Steven Meow)Yes
2026-04-21 19:13CVE-2026-4132
7.2
High
Chiao-Lin Yu (Steven Meow)No
2026-04-14 14:52CVE-2026-1555
9.8
Critical
Chiao-Lin Yu (Steven Meow)No
2026-04-13 17:42CVE-2026-2582
6.5
Medium
Chiao-Lin Yu (Steven Meow)Yes
2026-03-22 11:17CVE-2026-2580
7.5
High
Chiao-Lin Yu (Steven Meow)Yes
2026-03-20 11:00CVE-2026-3474
4.9
Medium
Chiao-Lin Yu (Steven Meow)Yes
2026-03-20 00:00CVE-2026-4432
5.3
Medium
Chiao-Lin Yu (Steven Meow)Yes
Showing 1–10 of 17 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C