kai63001

2026

Critical

High

Medium

Low

Global Rank

#280

of 3,238 researchers

Vulns

16

Critical1

High6

Medium9

Low0

Affected Assets

16

16plugins

Avg CVSS

6.9

Average score of vulnerabilities

Researcher Submissions

16 records


2026-07-06 00:00	AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 10.11.0 - Unauthenticated SQL Injection AcyMailing <= 10.11.0	`CVE-2026-57739`	7.5 High	kai63001	Yes
2026-06-05 00:00	Shared Files – Frontend File Upload Form & Secure File Sharing <= 1.7.64 - Unauthenticated Path Traversal Shared Files <= 1.7.64	`CVE-2026-49112`	5.3 Medium	kai63001	Yes
2026-06-03 00:00	Backup, Restore and Migrate your sites with XCloner <= 4.8.6 - Authenticated (Subscriber+) Information Exposure Backup, Restore and Migrate your sites… <= 4.8.6	`CVE-2026-48965`	4.3 Medium	kai63001	Yes
2026-06-02 00:00	GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.8.7 - Authenticated (Subscriber+) SQL Injection GamiPress <= 7.8.7	`CVE-2026-48874`	6.5 Medium	kai63001	Yes
2026-06-01 12:44	Auto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO) <= 4.9 - Authenticated (Author+) Stored Cross-Site Scripting via Image Attribute Auto Image Attributes From Filename Wit… <= 4.9	`CVE-2026-3722`	6.4 Medium	kai63001	Yes
2026-05-29 20:27	Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes Spectra Legacy <= 2.19.25	`CVE-2026-7465`	8.8 High	kai63001	Yes
2026-05-29 00:00	WPify Woo – Withdrawal, CRN/VAT, QR payments, Heureka and more for WooCommerce <= 5.4.1 - Authenticated (Contributor+) Arbitrary File Upload WPify Woo <= 5.4.1	`CVE-2026-42748`	8.8 High	kai63001	Yes
2026-05-28 00:00	Easy Form Builder by WhiteStudio — Drag & Drop Form Builder <= 4.0.6 - Unauthenticated SQL Injection Easy Form Builder by WhiteStudio <= 4.0.6	`CVE-2026-42747`	7.5 High	kai63001	Yes
2026-05-26 00:00	KiviCare – Clinic & Patient Management System (EHR) <= 4.3.0 - Missing Authorization KiviCare <= 4.3.0	`CVE-2026-42735`	5.3 Medium	kai63001	Yes
2026-05-04 17:58	GenerateBlocks <= 2.2.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Dynamic Tag Replacements GenerateBlocks <= 2.2.0	`CVE-2026-3454`	6.5 Medium	kai63001	Yes

Showing 1–10 of 16 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C