momopon1415

2026

Critical

High

Medium

Low

Global Rank

#385

of 3,238 researchers

Vulns

11

Critical0

High3

Medium8

Low0

Affected Assets

10

10plugins

Avg CVSS

5.9

Average score of vulnerabilities

Researcher Submissions

11 records


2026-07-07 23:49	User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Subscription Overwrite User Frontend <= 4.3.1	`CVE-2026-5459`	5.3 Medium	momopon1415	Yes
2026-06-26 00:00	Frisbii Pay <= 1.8.9 - Missing Authorization to Authenticated (Subscriber+) Payment Token Modification Frisbii Pay <= 1.8.9	`CVE-2026-3462`	6.5 Medium	momopon1415	Yes
2026-05-21 14:36	Location Weather <= 3.0.2 - Missing Authorization to Authenticated (Contributor+) Block Settings Modification and Cache Purging Location Weather <= 3.0.2	`CVE-2026-7249`	4.3 Medium	momopon1415	Yes
2026-05-14 19:53	Classified Listing <= 5.3.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via add_order_note and send_email_to_user_by_moderator AJAX Actions Classified Listing <= 5.3.10	`CVE-2026-7563`	4.3 Medium	momopon1415	Yes
2026-05-12 00:00	RTMKit Addons for Elementor <= 2.0.2 - Authenticated (Author+) Local File Inclusion via 'path' RTMKit <= 2.0.2	`CVE-2026-3425`	8.8 High	momopon1415	Yes
2026-05-12 00:00	RTMKit Addons for Elementor <= 2.0.2 - Authenticated (Author+) Missing Authorization to Widget Configuration Modification RTMKit <= 2.0.2	`CVE-2026-3426`	4.3 Medium	momopon1415	Yes
2026-05-01 20:15	Brizy – Page Builder <= 2.8.11 - Unauthenticated Stored Cross-Site Scripting via FileUpload Field Value Brizy <= 2.8.11	`CVE-2026-5324`	7.2 High	momopon1415	Yes
2026-04-27 18:18	Booking Package <= 1.7.06 - Unauthenticated Price Manipulation via 'amount' Parameter Booking Package <= 1.7.06	`CVE-2026-4911`	5.3 Medium	momopon1415	Yes
2026-04-16 15:10	Tutor LMS <= 3.9.8 - Authenticated (Subscriber+) Arbitrary Course Content Manipulation via tutor_update_course_content_order Tutor LMS <= 3.9.8	`CVE-2026-5502`	5.3 Medium	momopon1415	Yes
2026-04-10 12:55	LifterLMS <= 9.2.1 - Authenticated (Custom+) SQL Injection via 'order' Parameter LifterLMS <= 9.2.1	`CVE-2026-5207`	6.5 Medium	momopon1415	Yes

Showing 1–10 of 11 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C