Kuba

Kuba is a security researcher credited with 34 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #184 of 3,824 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Scripting, which accounts for 18 of their findings (53%). Other recurring categories include Code Injection, Missing Authorization. The average CVSS score across these disclosures is 6.8, peaking at 9.8. Severity breakdown: 4 critical and 12 high.

The most affected software includes Ad Inserter (1), All in One SEO (1), Click to Chat (1), across 34 distinct plugins, themes and core versions in total.

All 34 disclosed issues have since received a vendor fix. The most severe finding, "MailOptin <= 1.2.78.6 - Unauthenticated Privilege Escalation to 'form_custom_field_mappings' Parameter", scores 9.8 out of 10.

2026
Critical
High
Medium
Low
Global Rank

#184

of 3,824 researchers

Vulns

34

Critical4
High12
Medium17
Low1
Affected Assets

34

34plugins
Avg CVSS

6.8

Average score of vulnerabilities

Researcher Submissions

34 records
2026-10-16 19:37CVE-2026-110253
5.4
Medium
KubaYes
2026-10-16 14:40CVE-2026-96660
7.2
High
KubaYes
2026-10-16 14:31CVE-2026-107744
6.5
Medium
KubaYes
2026-10-15 19:57CVE-2026-104003
5.4
Medium
KubaYes
2026-10-15 17:09CVE-2026-103999
7.2
High
KubaYes
2026-10-15 16:57CVE-2026-104001
5.4
Medium
KubaYes
2026-10-15 16:43CVE-2026-104000
7.2
High
KubaYes
2026-10-15 16:17CVE-2026-107659
7.5
High
KubaYes
2026-10-15 16:09CVE-2026-109515
9.8
Critical
KubaYes
2026-10-15 15:50CVE-2026-110590
7.5
High
KubaYes
Showing 1–10 of 34 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C