Daniel Basta (whizzu)

2026

Critical

High

Medium

Low

Global Rank

#469

of 3,238 researchers

Vulns

9

Critical0

High2

Medium6

Low1

Affected Assets

6

6plugins

Avg CVSS

5.0

Average score of vulnerabilities

Researcher Submissions

9 records


2026-04-21 19:13	HTTP Headers <= 1.19.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Custom Headers' Plugin Setting HTTP Headers <= 1.19.4	`CVE-2026-1379`	4.4 Medium	Daniel Basta (whizzu)	Yes
2026-03-25 00:00	Conditional Menus <= 1.2.6 - Cross-Site Request Forgery to Menu Options Update Conditional Menus <= 1.2.6	`CVE-2026-1032`	4.3 Medium	Daniel Basta (whizzu)	Yes
2026-03-20 15:16	SurveyJS: Drag & Drop Form Builder <= 2.5.3 - Unauthenticated Stored Cross-Site Scripting SurveyJS <= 2.5.3	`CVE-2026-2440`	7.2 High	Daniel Basta (whizzu)	No
2026-02-17 19:00	YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) License Key Deletion via '/yaymail-license/v1/license/delete' Endpoint YayMail <= 4.3.2	`CVE-2026-1938`	5.3 Medium	Daniel Basta (whizzu)	Yes
2026-02-17 18:55	YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) Plugin Installation and Activation YayMail <= 4.3.2	`CVE-2026-1831`	2.7 Low	Daniel Basta (whizzu)	Yes
2026-02-17 18:44	YayMail <= 4.3.2 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via Template Elements YayMail <= 4.3.2	`CVE-2026-1943`	4.4 Medium	Daniel Basta (whizzu)	Yes
2026-02-17 18:41	YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Options Update via 'yaymail_import_state' AJAX Action YayMail <= 4.3.2	`CVE-2026-1937`	7.2 High	Daniel Basta (whizzu)	Yes
2026-02-03 19:30	SIBS - WooCommerce <= 2.2.0 - Authenticated (Admin+) SQL Injection via 'referencedId' Parameter SIBS woocommerce payment gateway <= 2.2.0	`CVE-2026-1370`	4.9 Medium	Daniel Basta (whizzu)	No
2026-01-27 19:38	Order Minimum/Maximum Amount Limits for WooCommerce <= 4.6.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via Hide Add to Cart Content Fields Order Minimum/Maximum Amount Limits for… <= 4.6.8	`CVE-2026-1381`	4.4 Medium	Daniel Basta (whizzu)	Yes

Showing 1–9 of 9 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C