Kazuma Matsumoto

2026

Critical

High

Medium

Low

Global Rank

#211

of 3,238 researchers

Vulns

24

Critical0

High3

Medium21

Low0

Affected Assets

18

18plugins

Avg CVSS

5.4

Average score of vulnerabilities

Researcher Submissions

24 records


2026-07-10 18:57	Genolve – AI image AI video generation <= 5.0.5 - Authenticated (Contributor+) Incorrect Authorization to Privilege Escalation via theopt Genolve <= 5.0.5	`CVE-2026-1359`	8.8 High	Kazuma Matsumoto	Yes
2026-07-10 15:30	SurfLink < 2.6.0 - Missing Authorization to Authenticated (Subscriber+) 410 Gone URL Import via 'surfl_import_410' AJAX Action SurfLink < 2.6.0	`CVE-2026-3552`	4.3 Medium	Kazuma Matsumoto	Yes
2026-07-10 15:18	AI Chatbot & Workflow Automation by AIWU <= 1.4.12 - Missing Authorization to Unauthenticated Arbitrary Modification via 'publishTasks' and 'unpublishTasks' AJAX Actions AI Copilot <= 1.4.12	`CVE-2026-6804`	5.3 Medium	Kazuma Matsumoto	Yes
2026-07-10 15:17	AI Chatbot & Workflow Automation by AIWU <= 1.4.12 - Missing Authorization to Unauthenticated Arbitrary Data Deletion via AJAX Actions 'removeGroup' and 'clear' AI Copilot <= 1.4.12	`CVE-2026-6803`	5.3 Medium	Kazuma Matsumoto	Yes
2026-05-19 17:23	AI Chatbot & Workflow Automation by AIWU <= 1.4.14 - Unauthenticated Stored Cross-Site Scripting via 'X-Forwarded-For' Header AI Copilot <= 1.4.14	`CVE-2026-2955`	6.4 Medium	Kazuma Matsumoto	Yes
2026-05-11 20:38	Continually <= 4.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'continually_embed_code' Parameter Continually <= 4.3.1	`CVE-2026-6813`	4.4 Medium	Kazuma Matsumoto	No
2026-05-11 20:37	FastBots <= 1.0.12 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings FastBots <= 1.0.12	`CVE-2026-6800`	4.4 Medium	Kazuma Matsumoto	Yes
2026-05-11 19:07	AI Chatbot & Workflow Automation by AIWU <= 1.4.17 - Unauthenticated SQL Injection in getListForTbl() AI Copilot <= 1.4.17	`CVE-2026-2993`	7.5 High	Kazuma Matsumoto	No
2026-04-20 18:26	Website LLMs.txt <= 8.2.6 - Authenticated (Admin+) Stored Cross-Site Scripting Website LLMs.txt <= 8.2.6	`CVE-2026-6712`	4.4 Medium	Kazuma Matsumoto	Yes
2026-04-20 00:00	Website LLMs.txt <= 8.2.6 - Reflected Cross-Site Scripting Website LLMs.txt <= 8.2.6	`CVE-2026-6711`	6.1 Medium	Kazuma Matsumoto	Yes

Showing 1–10 of 24 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C