Chloe Chamberland

20192020202120222023202420252026

Critical

High

Medium

Low

Global Rank

#46

of 3,248 researchers

Vulns

159

Critical27

High69

Medium63

Low0

Affected Assets

161

114plugins47themes

Avg CVSS

7.6

Average score of vulnerabilities

Researcher Submissions

159 records


2026-07-28 13:28	Wholesale for WooCommerce <= 2.0.5 - Authenticated (Author+) Privilege Escalation via 'user_role_set' Parameter Wholesale for WooCommerce <= 2.0.5	`CVE-2026-12144`	8.8 High	Chloe Chamberland	Yes
2026-07-10 14:58	Premium Addons for Elementor <= 4.11.84 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'premium_tooltip_text' Parameter Premium Addons for Elementor <= 4.11.84	`CVE-2026-12141`	4.9 Medium	Chloe Chamberland	Yes
2026-07-09 15:21	Post Export Import with Media <= 1.13.1 - Authenticated (Administrator+) Arbitrary File Upload via Trailing-Dot Filename Bypass in ZIP Media Import Post Export Import with Media <= 1.13.1	`CVE-2026-13430`	7.2 High	Chloe Chamberland	Yes
2026-07-08 18:04	AcyMailing <= 10.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alignment' Attribute AcyMailing <= 10.10.2	`CVE-2026-12170`	6.4 Medium	Chloe Chamberland	Yes
2026-07-01 19:58	JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification via season_groupedit AJAX action JoomSport <= 5.7.8	`CVE-2026-12134`	4.3 Medium	Chloe Chamberland	Yes
2026-06-30 19:50	RegistrationMagic <= 6.0.9.1 - Cross-Site Request Forgery to Privilege Escalation via 'rmc_assign_user_role_action' Parameter RegistrationMagic <= 6.0.9.1	`CVE-2026-12158`	8.8 High	Chloe Chamberland	Yes
2026-06-30 19:08	SMS Alert <= 3.9.5 - Unauthenticated Privilege Escalation via Arbitrary Password Reset SMS Alert <= 3.9.5	`CVE-2026-11387`	9.8 Critical	Chloe Chamberland	Yes
2026-06-30 14:47	JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Deletion via season_groupdel AJAX action JoomSport <= 5.7.8	`CVE-2026-12133`	4.3 Medium	Chloe Chamberland	Yes
2026-06-26 12:59	Groundhogg <= 4.5.5 - Authenticated (Sales Rep+) SQL Injection via 'query[select]' Parameter Groundhogg <= 4.5.5	`CVE-2026-13333`	6.5 Medium	Chloe Chamberland	Yes
2026-06-26 12:59	CodePeople Post Map for Google Maps <= 1.2.6 - Authenticated (Contributor +) Stored Cross-Site Scripting via 'cpm_point' Post Meta CodePeople Post Map for Google Maps <= 1.2.6	`CVE-2026-13335`	6.4 Medium	Chloe Chamberland	Yes

Showing 1–10 of 159 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C