Kai Aizen

20252026

Critical

High

Medium

Low

Global Rank

#290

of 3,213 researchers

Vulns

16

Critical1

High3

Medium12

Low0

Affected Assets

12

12plugins

Avg CVSS

6.0

Average score of vulnerabilities

Researcher Submissions

16 records


2026-04-21 19:13	HTTP Headers <= 1.19.2 - Authenticated (Administrator+) CRLF Injection via Custom Header Values HTTP Headers <= 1.19.2	`CVE-2026-2717`	5.5 Medium	Kai Aizen	No
2026-04-15 16:45	Riaxe Product Customizer <= 2.1.2 - Unauthenticated SQL Injection via 'options' Parameter Keys in product_data Riaxe Product Customizer <= 2.1.2	`CVE-2026-3599`	7.5 High	Kai Aizen	No
2026-04-15 16:45	Riaxe Product Customizer <= 2.1.2 - Unauthenticated Arbitrary User Deletion via 'user_id' Parameter Riaxe Product Customizer <= 2.1.2	`CVE-2026-3595`	5.3 Medium	Kai Aizen	No
2026-04-15 16:45	Riaxe Product Customizer <= 2.1.2 - Missing Authorization to Unauthenticated Arbitrary Options Update to Privilege Escalation via 'install-imprint' AJAX Action Riaxe Product Customizer <= 2.1.2	`CVE-2026-3596`	9.8 Critical	Kai Aizen	No
2026-04-14 10:49	3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.17 - Missing Authorization to Unauthenticated Private/Draft Flipbook Data Exposure 3D FlipBook <= 1.16.17	`CVE-2026-1314`	5.3 Medium	Kai Aizen	Yes
2026-04-08 05:13	Advanced CF7 DB <= 2.0.9 - Cross-Site Request Forgery to Form Entry Deletion Advanced Contact form 7 DB <= 2.0.9	`CVE-2026-0811`	5.4 Medium	Kai Aizen	Yes
2026-04-08 05:13	Advanced CF7 DB <= 2.0.9 - Missing Authorization to Authenticated (Subscriber+) Form Submissions Excel Export Advanced Contact form 7 DB <= 2.0.9	`CVE-2026-0814`	4.3 Medium	Kai Aizen	Yes
2026-04-07 17:37	Riaxe Product Customizer <= 2.4 - Unauthenticated Sensitive Information Disclosure via '/orders' REST API Endpoint Riaxe Product Customizer <= 2.4	`CVE-2026-3594`	5.3 Medium	Kai Aizen	No
2026-03-20 15:17	MimeTypes Link Icons <= 3.2.20 - Authenticated (Contributor+) Server-Side Request Forgery via Crafted Links in Post Content MimeTypes Link Icons <= 3.2.20	`CVE-2026-1313`	8.3 High	Kai Aizen	Yes
2026-01-27 21:48	TelSender <= 1.14.14 - Unauthenticated Stored Cross-Site Scripting via Telegram Chat Title TelSender <= 1.14.14	`CVE-2026-15298`	7.2 High	Kai Aizen	Yes

Showing 1–10 of 16 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C