Peng Zhou

202420252026

Critical

High

Medium

Low

Global Rank

#119

of 3,238 researchers

Vulns

49

Critical8

High6

Medium35

Low0

Affected Assets

41

40plugins1theme

Avg CVSS

6.2

Average score of vulnerabilities

Researcher Submissions

49 records


2026-07-08 00:00	Proxy & VPN Blocker <= 3.5.8 - Unauthenticated Stored Cross-Site Scripting Proxy & VPN Blocker <= 3.5.8	`CVE-2026-57399`	7.2 High	Peng Zhou	Yes
2026-07-08 00:00	FundEngine – Donation and Crowdfunding Platform <= 1.7.6 - Missing Authorization FundEngine <= 1.7.6	`CVE-2026-57406`	5.3 Medium	Peng Zhou	Yes
2026-06-18 00:00	WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce <= 4.7.3 - Unauthenticated Information Exposure WC Shop Sync <= 4.7.3	`CVE-2026-54848`	5.3 Medium	Peng Zhou	Yes
2026-05-28 00:00	Advanced IP Blocker <= 8.10.7 - Unauthenticated Stored Cross-Site Scripting Advanced IP Blocker <= 8.10.7	`CVE-2026-42739`	7.2 High	Peng Zhou	Yes
2026-05-24 00:00	miniOrange OTP Login, Verification and SMS Notifications <= 5.4.9 - Unauthenticated Privilege Escalation miniOrange OTP Login <= 5.4.9	`CVE-2026-42731`	9.8 Critical	Peng Zhou	Yes
2026-05-14 00:00	Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity <= 3.3.6 - Unauthenticated Information Exposure Activity Logs <= 3.3.6	`CVE-2026-42673`	5.3 Medium	Peng Zhou	Yes
2024-09-12 00:00	WordPress Tag Cloud Plugin – Tag Groups <= 2.0.3 - Missing Authorization to Information Exposure Tag Groups is the Advanced Way to Displ… <= 2.0.3	`CVE-2024-43237`	5.3 Medium	Peng Zhou	Yes
2024-08-29 00:00	Masterstudy LMS Starter <= 1.1.8 - Unauthenticated Sensitive Information Exposure Masterstudy - Education WordPress Theme <= 1.1.8	`CVE-2024-43990`	5.3 Medium	Peng Zhou	Yes
2024-08-16 00:00	WP SMS <= 6.9.3 - Missing Authorization WSMS (formerly WP SMS) <= 6.9.3	`CVE-2024-43331`	5.3 Medium	Peng Zhou	Yes
2024-08-12 00:00	Create by Mediavine <= 1.9.8 - Unauthenticated Sensitive Information Exposure Create <= 1.9.8	`CVE-2024-43264`	5.3 Medium	Peng Zhou	Yes

Showing 1–10 of 49 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C