johska

20252026

Critical

High

Medium

Low

Global Rank

#31

of 3,238 researchers

Vulns

253

Critical4

High12

Medium237

Low0

Affected Assets

246

246plugins

Avg CVSS

6.0

Average score of vulnerabilities

Researcher Submissions

253 records


2026-07-22 00:00	MapSVG – Vector maps, Image maps, Google Maps <= 8.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting MapSVG <= 8.14.0	`CVE-2026-65449`	6.4 Medium	johska	Yes
2026-05-26 00:00	Travelly – Tour & Travel Booking Manager for WooCommerce \| Tour & Hotel Booking Solution <= 2.1.5 - Missing Authorization Travelly <= 2.1.5	`CVE-2026-27331`	4.3 Medium	johska	Yes
2026-05-26 00:00	Appointment Booking Plugin for WooCommerce – WpBookingly \| All-in-One Service Manager <= 1.2.9 - Missing Authorization Appointment Booking Plugin for WooComme… <= 1.2.9	`CVE-2026-25444`	4.3 Medium	johska	Yes
2026-03-23 00:00	Contact Manager <= 9.1 - Reflected Cross-Site Scripting Contact Manager <= 9.1	`CVE-2026-32517`	6.1 Medium	johska	Yes
2026-03-23 00:00	WP Telegram Widget and Join Link <= 2.2.13 - Reflected Cross-Site Scripting WP Telegram Widget and Join Link <= 2.2.13	`CVE-2026-23807`	6.1 Medium	johska	Yes
2026-03-23 00:00	KiviCare – Clinic & Patient Management System (EHR) <= 3.6.16 - Reflected Cross-Site Scripting KiviCare <= 3.6.16	`CVE-2026-25383`	6.1 Medium	johska	Yes
2026-03-23 00:00	RSFirewall! <= 1.1.45 - Unauthenticated Stored Cross-Site Scripting RSFirewall! <= 1.1.45	`CVE-2026-25341`	7.2 High	johska	Yes
2026-03-23 00:00	File Uploader for WooCommerce <= 1.0.4 - Unauthenticated Path Traversal File Uploader for WooCommerce <= 1.0.4	`CVE-2026-25397`	5.3 Medium	johska	No
2026-03-23 00:00	Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.9 - Missing Authorization Five Star Restaurant Reservations <= 2.7.9	`CVE-2026-25327`	5.3 Medium	johska	Yes
2026-03-23 00:00	VikRestaurants Table Reservations and Take-Away <= 1.5.2 - Reflected Cross-Site Scripting VikRestaurants Table Reservations and T… <= 1.5.2	`CVE-2026-25025`	6.1 Medium	johska	Yes

Showing 1–10 of 253 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C