Supakiad S. (m3ez)

20252026

Critical

High

Medium

Low

Global Rank

#145

of 3,248 researchers

Vulns

42

Critical3

High15

Medium24

Low0

Affected Assets

22

22plugins

Avg CVSS

6.2

Average score of vulnerabilities

Researcher Submissions

42 records


2026-07-23 08:24	SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter SAML Single Sign On <= 5.4.4	`CVE-2026-15981`	9.8 Critical	Supakiad S. (m3ez)	Yes
2026-07-20 19:30	Tutor LMS Elementor Addons <= 4.0.0 - Missing Authorization to Authenticated (Subscriber+) Tutor LMS and Elementor Plugin Activation Tutor LMS Elementor Addons <= 4.0.0	`CVE-2026-1372`	4.3 Medium	Supakiad S. (m3ez)	No
2026-07-15 19:32	Tutor LMS <= 4.0.0 - Authenticated (Subscriber+) SQL Injection via Stored Quiz Answer Array Tutor LMS <= 4.0.0	`CVE-2026-15022`	6.5 Medium	Supakiad S. (m3ez)	Yes
2026-07-10 16:08	SureCart <= 4.2.3 - Unauthenticated Linked WordPress Account Takeover via Forged customer.updated Webhook SureCart <= 4.2.3	`CVE-2026-7655`	8.1 High	Supakiad S. (m3ez)	Yes
2026-07-10 07:45	miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.7.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Profile Completion OTP Flow miniOrange Social Login and Register (D… <= 7.7.0	`CVE-2026-12761`	9.8 Critical	Supakiad S. (m3ez)	Yes
2026-06-25 19:44	User Registration & Membership <= 5.2.0 - Missing Authorization to Unauthenticated Payment Bypass User Registration & Membership <= 5.2.0	`CVE-2026-1869`	6.5 Medium	Supakiad S. (m3ez)	Yes
2026-06-08 20:48	User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.2 - Missing Authorization to Authenticated (Subscriber+) Subscription Pack Cancellation User Frontend <= 4.3.2	`CVE-2026-4058`	4.3 Medium	Supakiad S. (m3ez)	Yes
2026-05-27 18:28	SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header SlimStat Analytics <= 5.4.11	`CVE-2026-7634`	7.2 High	Supakiad S. (m3ez)	Yes
2026-05-27 00:00	User Registration & Membership <= 5.1.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Media Deletion via 'profile-pic-url' Parameter User Registration & Membership <= 5.1.5	`CVE-2026-7651`	5.3 Medium	Supakiad S. (m3ez)	Yes
2026-05-04 14:11	Subscribe To Comments Reloaded <= 240119 - Improper Authorization to Unauthenticated Arbitrary Subscription Management Subscribe To Comments Reloaded <= 240119	`CVE-2026-4409`	6.5 Medium	Supakiad S. (m3ez)	No

Showing 1–10 of 42 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C