lucsob

2026

Critical

High

Medium

Low

Global Rank

#387

of 3,238 researchers

Vulns

11

Critical0

High1

Medium10

Low0

Affected Assets

11

11plugins

Avg CVSS

5.2

Average score of vulnerabilities

Researcher Submissions

11 records


2026-07-27 20:36	Media Cleaner: Clean your WordPress! <= 7.0.3 - Authenticated (Administrator+) Server-Side Request Forgery Media Cleaner <= 7.0.3	`CVE-2026-4912`	4.1 Medium	lucsob	Yes
2026-07-16 13:18	Smart Custom Fields <= 5.0.7 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Title Smart Custom Fields <= 5.0.7	`CVE-2026-2594`	6.4 Medium	lucsob	Yes
2026-04-16 15:21	JetBackup <= 3.1.19.8 - Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal in 'fileName' Parameter JetBackup <= 3.1.19.8	`CVE-2026-4853`	4.9 Medium	lucsob	Yes
2026-04-03 19:45	Kadence Blocks — Page Builder Toolkit for Gutenberg Editor <= 3.6.3 - Missing Authorization to Authenticated (Contributor+) Media Upload Kadence Blocks <= 3.6.3	`CVE-2026-2826`	4.3 Medium	lucsob	Yes
2026-03-10 11:29	LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.2.7 - Cross-Site Request Forgery in Booking Form Settings Update to Stored Cross-Site Scripting Appointment Booking Plugin <= 5.2.7	`CVE-2026-2324`	6.1 Medium	lucsob	Yes
2026-03-03 22:00	Seraphinite Accelerator <= 2.28.14 - Authenticated (Subscriber+) Exposure of Sensitive Information to an Unauthorized Actor Seraphinite Accelerator <= 2.28.14	`CVE-2026-3058`	4.3 Medium	lucsob	Yes
2026-03-02 12:35	Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.0.0.3 - Authenticated (Administrator+) Server-Side Request Forgery to Arbitrary File Upload Uncanny Automator <= 7.0.0.3	`CVE-2026-2269`	7.2 High	lucsob	Yes
2026-02-24 20:56	Disable Admin Notices – Hide Dashboard Notifications <= 1.4.2 - Cross-Site Request Forgery to Plugin Settings Update Disable Admin Notices <= 1.4.2	`CVE-2026-2410`	4.3 Medium	lucsob	Yes
2026-02-24 20:06	Responsive Lightbox & Gallery <= 2.7.1 - Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Upload Responsive Lightbox & Gallery <= 2.7.1	`CVE-2026-2479`	5.0 Medium	lucsob	Yes
2026-02-13 18:31	Smart Forms <= 2.6.100 - Missing Authorization to Authenticated (Subscriber+) Campaign Data Exposure Smart Forms <= 2.6.100	`CVE-2026-2022`	4.3 Medium	lucsob	Yes

Showing 1–10 of 11 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C