Jakub Herman

2026

Critical

High

Medium

Low

Global Rank

#109

of 3,238 researchers

Vulns

52

Critical1

High4

Medium47

Low0

Affected Assets

52

52plugins

Avg CVSS

5.2

Average score of vulnerabilities

Researcher Submissions

51 records


2026-07-16 00:00	Notifima – WooCommerce Stock Manager, Inventory Management, Waitlist <= 3.0.6 - Authenticated (Subscriber+) Sensitive Information Exposure Notifima <= 3.0.6	`CVE-2026-61945`	4.3 Medium	Jakub Herman	Yes
2026-07-08 00:00	ProfileGrid – User Profiles, Groups and Communities <= 5.9.9.6 - Unauthenticated Privilege Escalation via Password Reset ProfileGrid <= 5.9.9.6	`CVE-2026-57697`	9.8 Critical	Jakub Herman	Yes
2026-07-07 00:00	Advanced Forms for ACF <= 1.9.3.7 - Missing Authorization Advanced Forms for ACF <= 1.9.3.7	`CVE-2026-57378`	5.3 Medium	Jakub Herman	Yes
2026-07-01 00:00	eCommerce Product Catalog Plugin for WordPress <= 3.5.4 - Unauthenticated Stored Cross-Site Scripting eCommerce Product Catalog Plugin for Wo… <= 3.5.4	`CVE-2026-57360`	7.2 High	Jakub Herman	Yes
2026-07-01 00:00	ApplyOnline – Application Form Builder and Manager <= 2.6.7.6 - Missing Authorization ApplyOnline <= 2.6.7.6	`CVE-2026-57721`	5.3 Medium	Jakub Herman	Yes
2026-07-01 00:00	HubSpot All-In-One Marketing – Forms, Popups, Live Chat <= 11.3.55 - Authenticated (Contributor+) Information Exposure HubSpot All-In-One Marketing <= 11.3.55	`CVE-2026-57736`	4.3 Medium	Jakub Herman	Yes
2026-06-26 00:00	Affiliates Manager <= 2.9.49 - Missing Authorization Affiliates Manager <= 2.9.49	`CVE-2026-57654`	4.3 Medium	Jakub Herman	Yes
2026-06-25 00:00	Print Invoice & Delivery Notes for WooCommerce <= 7.1.1 - Unauthenticated Information Exposure Print Invoice & Delivery Notes for WooC… <= 7.1.1	`CVE-2026-56060`	5.3 Medium	Jakub Herman	Yes
2026-06-25 00:00	Subscriptions for WooCommerce <= 1.9.5 - Missing Authorization Subscriptions for WooCommerce <= 1.9.5	`CVE-2026-56061`	5.3 Medium	Jakub Herman	Yes
2026-06-25 00:00	Payment Gateway Based Fees and Discounts for WooCommerce <= 3.0.0 - Unauthenticated Insecure Direct Object Reference Payment Gateway Based Fees and Discount… <= 3.0.0	`CVE-2026-56048`	5.3 Medium	Jakub Herman	Yes

Showing 1–10 of 51 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C