Kévin Mosbahi (Mika)

2017201820192020202120222023202420252026

Critical

High

Medium

Low

Global Rank

#7

of 3,203 researchers

Vulns

712

Critical26

High75

Medium610

Low1

Affected Assets

645

633plugins12themes

Avg CVSS

5.6

Average score of vulnerabilities

Researcher Submissions

712 records


2026-04-15 00:00	Smart Online Order for Clover <= 1.6.0 - Cross-Site Request Forgery Smart Online Order for Clover <= 1.6.0	`CVE-2025-15635`	4.3 Medium	Kévin Mosbahi (Mika)	No
2026-02-03 00:00	Atarim <= 4.0.9 - Missing Authorization to Unauthenticated Arbitrary Post Deletion Atarim <= 4.0.9	`CVE-2025-22657`	5.3 Medium	Kévin Mosbahi (Mika)	Yes
2026-01-06 00:00	SMSA Shipping <= 2.3 - Authenticated (Subscriber+) Arbitrary File Deletion SMSA Shipping (official) <= 2.3	`CVE-2024-49249`	8.1 High	Kévin Mosbahi (Mika)	Yes
2025-12-18 00:00	Agency Toolkit <= 1.0.23 - Unauthenticated Privilege Escalation Agency Toolkit <= 1.0.23	`CVE-2024-56066`	9.8 Critical	Kévin Mosbahi (Mika)	Yes
2025-12-05 00:00	SV100 Companion <= 2.0.02 - Unauthenticated Privilege Escalation SV100 Companion <= 2.0.02	`CVE-2024-54229`	9.8 Critical	Kévin Mosbahi (Mika)	No
2025-11-13 00:00	Debug Tool <= 2.2 - Unauthenticated Remote Code Execution Debug Tool <= 2.2	`CVE-2024-52416`	9.8 Critical	Kévin Mosbahi (Mika)	No
2025-11-13 00:00	Plugin Manager <= 1.4.7 - Cross-Site Request Forgery WP Plugin Manager <= 1.4.7	`CVE-2025-64271`	4.3 Medium	Kévin Mosbahi (Mika)	Yes
2025-11-12 00:00	Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.5 - Missing Authorization Online Booking & Scheduling Calendar fo… <= 4.5.5	`CVE-2025-67559`	4.3 Medium	Kévin Mosbahi (Mika)	Yes
2025-11-12 00:00	Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.5 - Cross-Site Request Forgery Online Booking & Scheduling Calendar fo… <= 4.5.5	`CVE-2025-67472`	4.3 Medium	Kévin Mosbahi (Mika)	Yes
2025-09-27 00:00	WP Microdata <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting WP Microdata <= 1.0	`CVE-2025-62901`	6.4 Medium	Kévin Mosbahi (Mika)	No

Showing 1–10 of 712 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C