Colin Xu

202420252026

Critical

High

Medium

Low

Global Rank

#68

of 3,248 researchers

Vulns

106

Critical2

High37

Medium66

Low1

Affected Assets

103

103plugins

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

106 records


2026-05-14 19:18	Frontend Admin by DynamiApps <= 3.28.36 - Unauthenticated Privilege Escalation via Edit User Form Frontend Admin by DynamiApps <= 3.28.36	`CVE-2026-6228`	8.8 High	Colin Xu	Yes
2025-04-01 20:34	Front End Users <= 3.2.32 - Authenticated (Admin+) SQL injection Front End Users <= 3.2.32	`CVE-2024-12410`	4.9 Medium	Colin Xu	Yes
2025-03-10 16:21	ProductDyno <= 1.0.24 - Reflected Cross-Site Scripting via 'res' Parameter ProductDyno <= 1.0.24	`CVE-2024-13413`	6.1 Medium	Colin Xu	Yes
2025-02-28 15:26	Currency Switcher for WooCommerce <= 2.16.2 - Reflected Cross-Site Scripting Currency Switcher for WooCommerce <= 2.16.2	`CVE-2024-9217`	6.1 Medium	Colin Xu	Yes
2025-02-21 16:07	LTL Freight Quotes – Purolator Edition <= 2.2.3 - Unauthenticated SQL Injection LTL Freight Quotes <= 2.2.3	`CVE-2024-13474`	7.5 High	Colin Xu	Yes
2025-02-19 00:00	LTL Freight Quotes – GlobalTranz Edition <= 2.3.12 - Missing Authorization to Unauthenticated Settings Update LTL Freight Quotes <= 2.3.12	`CVE-2025-1483`	5.3 Medium	Colin Xu	Yes
2025-02-19 00:00	LTL Freight Quotes – GlobalTranz Edition <= 2.3.11 - Unauthenticated SQL Injection LTL Freight Quotes <= 2.3.11	`CVE-2024-13476`	7.5 High	Colin Xu	Yes
2025-02-18 21:56	LTL Freight Quotes – SEFL Edition <= 3.2.4 - Unauthenticated SQL Injection LTL Freight Quotes <= 3.2.4	`CVE-2024-13479`	7.5 High	Colin Xu	Yes
2025-02-18 21:44	Small Package Quotes – Worldwide Express Edition <= 5.2.18 - Unauthenticated SQL Injection Small Package Quotes <= 5.2.18	`CVE-2024-13534`	7.5 High	Colin Xu	Yes
2025-02-18 19:28	Pollin <= 1.01.1 - Reflected Cross-Site Scripting Pollin <= 1.01.1	`CVE-2024-13711`	6.1 Medium	Colin Xu	No

Showing 1–10 of 106 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C