Drew Webber (mcdruid)

20252026

Critical

High

Medium

Low

Global Rank

#97

of 3,238 researchers

Vulns

63

Critical8

High29

Medium26

Low0

Affected Assets

59

59plugins

Avg CVSS

7.3

Average score of vulnerabilities

Researcher Submissions

62 records


2026-06-23 00:00	MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites <= 6.1.1 - Missing Authorization MainWP Child <= 6.1.1	`CVE-2026-27366`	5.3 Medium	Drew Webber (mcdruid)	Yes
2026-06-12 19:20	Pagelayer <= 2.0.9 - Incorrect Authorization to Authenticated (Contributor+) Mail Relay Configuration via 'contacts' Page Builder: Pagelayer <= 2.0.9	`CVE-2026-2470`	4.3 Medium	Drew Webber (mcdruid)	Yes
2026-06-05 10:44	Quiz and Survey Master (QSM) <= 11.1.2 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' Parameters Quiz and Survey Master (QSM) <= 11.1.2	`CVE-2026-6448`	4.9 Medium	Drew Webber (mcdruid)	Yes
2026-06-01 00:00	SlimStat Analytics < 5.4.0 - Unauthenticated PHP Object Injection SlimStat Analytics < 5.4.0	`CVE-2026-27410`	8.1 High	Drew Webber (mcdruid)	Yes
2026-05-28 00:00	Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App <= 3.6.2 - Unauthenticated Stored Cross-Site Scripting Post SMTP <= 3.6.2	`CVE-2026-48838`	7.2 High	Drew Webber (mcdruid)	Yes
2026-05-13 18:15	Media Sync <= 1.4.9 - Authenticated (Author+) Path Traversal via 'sub_dir' and 'media_items' Parameters Media Sync <= 1.4.9	`CVE-2026-6670`	6.5 Medium	Drew Webber (mcdruid)	Yes
2026-05-13 00:00	Database Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Arbitrary File Read and Deletion Database Backup for WordPress <= 2.5.2	`CVE-2026-4030`	8.1 High	Drew Webber (mcdruid)	Yes
2026-05-13 00:00	Database Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Database Backup Interception Database Backup for WordPress <= 2.5.2	`CVE-2026-4031`	7.5 High	Drew Webber (mcdruid)	Yes
2026-05-13 00:00	Database Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Database Export Database Backup for WordPress <= 2.5.2	`CVE-2026-4029`	7.5 High	Drew Webber (mcdruid)	Yes
2026-05-11 00:00	OttoKit: All-in-One Automation Platform < 1.1.23 - Unauthenticated SQL Injection OttoKit < 1.1.23	`CVE-2026-4935`	7.5 High	Drew Webber (mcdruid)	Yes

Showing 1–10 of 62 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C