Ryan Kozak

202420252026

Critical

High

Medium

Low

Global Rank

#179

of 3,238 researchers

Vulns

29

Critical7

High15

Medium7

Low0

Affected Assets

23

23plugins

Avg CVSS

7.5

Average score of vulnerabilities

Researcher Submissions

29 records


2026-06-05 14:20	MDJM Event Management <= 1.7.8.3 - Authenticated (Administrator+) Arbitrary File Upload via 'mdjm_email_upload_file' Parameter MDJM Event Management <= 1.7.8.3	`CVE-2026-7537`	7.2 High	Ryan Kozak	Yes
2026-01-23 19:03	Kalrav AI Agent <= 2.3.3 - Unauthenticated Arbitrary File Upload via kalrav_upload_file AJAX Action KalravAI Agent <= 2.3.3	`CVE-2025-13374`	9.8 Critical	Ryan Kozak	No
2025-12-05 17:38	g-FFL Cockpit <= 1.7.1 - Improper Authorization to Unauthenticated Product Deletion g-FFL Cockpit <= 1.7.1	`CVE-2025-12720`	5.3 Medium	Ryan Kozak	Yes
2025-12-05 17:38	g-FFL Cockpit <= 1.7.1 - Missing Authorization to Unauthenticated Information Exposure g-FFL Cockpit <= 1.7.1	`CVE-2025-12721`	5.3 Medium	Ryan Kozak	Yes
2025-12-05 16:45	Flex QR Code Generator <= 1.2.7 - Unauthenticated Arbitrary File Upload Flex QR Code Generator <= 1.2.7	`CVE-2025-12673`	9.8 Critical	Ryan Kozak	Yes
2025-12-04 16:31	Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents <= 7.11.1374 - Cross-Site Request Forgery to Arbitrary File Upload Bread & Butter <= 7.11.1374	`CVE-2025-12189`	4.3 Medium	Ryan Kozak	Yes
2025-12-03 00:39	WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover WP Directory Kit 1.4.0 – 1.4.4	`CVE-2025-13390`	10.0 Critical	Ryan Kozak	Yes
2025-12-02 14:25	MxChat – AI Chatbot for WordPress <= 2.5.5 - Unauthenticated Information Exposure MxChat <= 2.5.5	`CVE-2025-12585`	5.3 Medium	Ryan Kozak	Yes
2025-11-25 09:45	AI Feeds <= 1.0.11 - Unauthenticated Arbitrary File Upload AI Feeds <= 1.0.11	`CVE-2025-13597`	9.8 Critical	Ryan Kozak	Yes
2025-11-25 09:39	CIBELES AI <= 1.10.8 - Unauthenticated Arbitrary File Upload CIBELES AI <= 1.10.8	`CVE-2025-13595`	9.8 Critical	Ryan Kozak	Yes

Showing 1–10 of 29 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C