Quốc Huy (jtwings)

2026

Critical

High

Medium

Low

Global Rank

#270

of 3,238 researchers

Vulns

17

Critical0

High3

Medium14

Low0

Affected Assets

16

15plugins1theme

Avg CVSS

6.0

Average score of vulnerabilities

Researcher Submissions

17 records


2026-07-23 18:30	Open User Map <= 1.4.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes Open User Map <= 1.4.45	`CVE-2026-15755`	6.4 Medium	Quốc Huy (jtwings)	Yes
2026-07-23 14:27	Firelight Lightbox <= 2.3.20 - Authenticated (Contributor+) Stored DOM Cross-Site Scripting via PDF beforeLoad 'href' Attribute Firelight Lightbox <= 2.3.20	`CVE-2026-6454`	6.4 Medium	Quốc Huy (jtwings)	Yes
2026-06-08 20:11	Blocksy <= 2.1.41 - Authenticated (Contributor+) PHP Object Injection via Deserialization of Untrusted Data via 'blocksy_meta' REST API Field Blocksy <= 2.1.41	`CVE-2026-8365`	8.8 High	Quốc Huy (jtwings)	Yes
2026-05-27 10:58	Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder <= 3.4.7 - Missing Authorization to Authenticated (Subscriber+) Email Sending Everest Forms <= 3.4.7	`CVE-2026-4888`	4.3 Medium	Quốc Huy (jtwings)	Yes
2026-04-10 11:56	Optimole <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting via Srcset Descriptor Parameter Optimole <= 4.2.2	`CVE-2026-5217`	7.2 High	Quốc Huy (jtwings)	Yes
2026-03-31 12:23	Database for Contact Form 7, WPforms, Elementor forms <= 1.4.9 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode Database for Contact Form 7 <= 1.4.9	`CVE-2026-3831`	4.3 Medium	Quốc Huy (jtwings)	Yes
2026-03-18 00:00	Download Manager <= 3.3.49 - Missing Authorization to Authenticated (Subscriber+) User Email Enumeration via 'user' Parameter Download Manager <= 3.3.49	`CVE-2026-2571`	4.3 Medium	Quốc Huy (jtwings)	Yes
2026-03-16 15:17	Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure Royal Addons for Elementor <= 1.7.1049	`CVE-2026-2373`	5.3 Medium	Quốc Huy (jtwings)	Yes
2026-03-12 19:30	GetGenie <= 4.3.2 - Insecure Direct Object Reference to Authenticated (Author+) Stored Cross-Site Scripting via REST API GetGenie <= 4.3.2	`CVE-2026-2257`	6.4 Medium	Quốc Huy (jtwings)	Yes
2026-03-10 17:08	WP ULike <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute WP ULike <= 5.0.1	`CVE-2026-2358`	6.4 Medium	Quốc Huy (jtwings)	Yes

Showing 1–10 of 17 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C