dayea song

20252026

Critical

High

Medium

Low

Global Rank

#163

of 3,248 researchers

Vulns

35

Critical0

High1

Medium34

Low0

Affected Assets

32

32plugins

Avg CVSS

4.9

Average score of vulnerabilities

Researcher Submissions

35 records


2026-02-18 15:38	Country Blocker for AdSense <= 1.0 - Cross-Site Request Forgery to Settings Update Country Blocker for AdSense <= 1.0	`CVE-2025-13413`	4.3 Medium	dayea song	No
2026-02-18 15:38	Page Title, Description & Open Graph Updater <= 1.02 - Cross-Site Request Forgery to Arbitrary Page Title Modification Page Title <= 1.02	`CVE-2025-13438`	4.3 Medium	dayea song	No
2026-01-13 17:31	Stopwords for comments <= 1.1 - Missing Authorization to Cross-Site Request Forgery Stopwords for comments <= 1.1	`CVE-2025-15376`	4.3 Medium	dayea song	No
2026-01-13 17:22	Sosh Share Buttons <= 1.1.0 - Cross-Site Request Forgery Sosh Share Buttons <= 1.1.0	`CVE-2025-15377`	4.3 Medium	dayea song	No
2026-01-13 17:16	WPBlogSyn <= 1.0 - Cross-Site Request Forgery to Arbitrary Remote Sync Configuration Update WPBlogSyn <= 1.0	`CVE-2025-14389`	4.3 Medium	dayea song	No
2026-01-06 20:30	Mamurjor Employee Info <= 1.0.0 - Cross-Site Request Forgery to Arbitrary Employee and Related Data Manipulation Mamurjor Employee Info <= 1.0.0	`CVE-2025-13990`	4.3 Medium	dayea song	No
2026-01-06 19:40	SVG Map Plugin <= 1.0.0 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting SVG Map by Smjrifle <= 1.0.0	`CVE-2025-13519`	6.1 Medium	dayea song	No
2026-01-06 19:39	xShare <= 1.0.1 - Cross-Site Request Forgery to 'rs_plugin_reset' Parameter xShare <= 1.0.1	`CVE-2025-13527`	4.3 Medium	dayea song	No
2025-12-20 14:22	Web to SugarCRM Lead <= 1.0.0 - Cross-Site Request Forgery to Custom Field Deletion Web to SugarCRM Lead <= 1.0.0	`CVE-2025-13361`	4.3 Medium	dayea song	Yes
2025-12-12 16:09	Popover Windows <= 1.2 - Cross-Site Request Forgery to Arbitrary Popover Configuration Update Popover Windows <= 1.2	`CVE-2025-14394`	4.3 Medium	dayea song	No

Showing 1–10 of 35 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C