Jonas Benjamin Friedli

202420252026

Critical

High

Medium

Low

Global Rank

#58

of 3,248 researchers

Vulns

130

Critical5

High24

Medium96

Low5

Affected Assets

111

110plugins1theme

Avg CVSS

5.7

Average score of vulnerabilities

Researcher Submissions

130 records


2026-07-10 16:42	Code Engine <= 0.3.5 - Authenticated (Contributor+) Remote Code Execution Code Engine <= 0.3.5	`CVE-2025-6784`	8.8 High	Jonas Benjamin Friedli	Yes
2026-02-17 16:37	Popup Box – Easily Create WordPress Popups <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting Popup Box <= 3.2.12	`CVE-2025-12122`	6.4 Medium	Jonas Benjamin Friedli	Yes
2026-02-17 00:00	Bookster – WordPress Appointment Booking Plugin <= 2.1.1 - Authenticated (Administrator+) SQL Injection via 'raw' Bookster <= 2.1.1	`CVE-2025-8781`	4.9 Medium	Jonas Benjamin Friedli	Yes
2026-02-13 18:16	One to one user Chat by WPGuppy <= 1.1.4 - Unauthenticated Information Disclosure via Chat Message Interception One to one user Chat by WPGuppy <= 1.1.4	`CVE-2025-6792`	5.3 Medium	Jonas Benjamin Friedli	No
2026-02-05 18:30	OAuth Single Sign On – SSO (OAuth Client) <= 6.26.14 - Missing Authorization OAuth Single Sign On <= 6.26.14	`CVE-2025-10753`	5.3 Medium	Jonas Benjamin Friedli	Yes
2026-01-16 19:16	CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Information Exposure CubeWP Framework <= 1.1.27	`CVE-2025-12129`	5.3 Medium	Jonas Benjamin Friedli	Yes
2025-12-12 15:39	Export WP Page to Static HTML & PDF <= 4.3.4 - Unauthenticated Cookie Exposure via Log File Export WordPress Pages to Static HTML &… <= 4.3.4	`CVE-2025-11693`	9.8 Critical	Jonas Benjamin Friedli	Yes
2025-12-12 15:29	Mavix Education <= 1.0 - Missing Authorization to Authenticated (Subscriber+) 'Creativ Demo Importer' Plugin Activation Mavix Education <= 1.0	`CVE-2025-11164`	4.3 Medium	Jonas Benjamin Friedli	Yes
2025-12-12 15:26	Emplibot – AI Content Writer with Keyword Research, Infographics, and Linking \| SEO Optimized \| Fully Automated <= 1.0.9 - Authenticated (Admin+) Server-Side Request Forgery Emplibot <= 1.0.9	`CVE-2025-11970`	4.4 Medium	Jonas Benjamin Friedli	Yes
2025-12-04 19:20	WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors <= 2.6.4 - Cross-Site Request Forgery to Vendor Product Deletion WC Vendors <= 2.6.4	`CVE-2025-12130`	4.3 Medium	Jonas Benjamin Friedli	Yes

Showing 1–10 of 130 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C