Naoya Takahashi (nakko)

20252026

Critical

High

Medium

Low

Global Rank

#250

of 3,248 researchers

Vulns

19

Critical0

High13

Medium6

Low0

Affected Assets

17

17plugins

Avg CVSS

7.0

Average score of vulnerabilities

Researcher Submissions

19 records


2026-07-07 23:40	VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via Booking Form Email Field VikBooking Hotel Booking Engine & PMS <= 1.8.8	`CVE-2026-6820`	7.2 High	Naoya Takahashi (nakko)	Yes
2026-06-15 17:09	King Addons for Elementor <= 51.1.62 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'form_page_id' Parameter King Addons for Elementor <= 51.1.62	`CVE-2026-15284`	6.4 Medium	Naoya Takahashi (nakko)	Yes
2026-06-12 22:03	Online Scheduling and Appointment Booking System – Bookly <= 27.2 - Unauthenticated Stored Cross-Site Scripting via 'bookly-customer-full-name' Cookie Online Scheduling and Appointment Booki… <= 27.2	`CVE-2026-5513`	7.2 High	Naoya Takahashi (nakko)	Yes
2026-05-29 20:40	GEO my WP <= 4.5.5 - Unauthenticated SQL Injection via 'swlatlng' / 'nelatlng' Parameters GEO my WP <= 4.5.5	`CVE-2026-9757`	7.5 High	Naoya Takahashi (nakko)	Yes
2026-05-02 15:41	NEX-Forms <= 9.1.11 - Unauthenticated Stored Cross-Site Scripting via POST Parameter Key Names NEX-Forms <= 9.1.11	`CVE-2026-5063`	7.2 High	Naoya Takahashi (nakko)	Yes
2026-05-01 00:00	Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'map_post_type' Parameter Geo Mashup <= 1.13.18	`CVE-2026-4061`	7.5 High	Naoya Takahashi (nakko)	Yes
2026-05-01 00:00	Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'sort' Parameter Geo Mashup <= 1.13.18	`CVE-2026-4060`	7.5 High	Naoya Takahashi (nakko)	Yes
2026-05-01 00:00	Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'object_ids' Parameter Geo Mashup <= 1.13.18	`CVE-2026-4062`	7.5 High	Naoya Takahashi (nakko)	Yes
2026-04-16 12:48	MasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+) Time-based Blind SQL Injection via 'order' and 'orderby' Parameters MasterStudy LMS WordPress Plugin <= 3.7.25	`CVE-2026-4817`	6.5 Medium	Naoya Takahashi (nakko)	Yes
2026-04-13 13:52	Form Maker by 10Web <= 1.15.40 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Text Box Form Maker by 10Web <= 1.15.40	`CVE-2026-4388`	7.2 High	Naoya Takahashi (nakko)	Yes

Showing 1–10 of 19 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C