Youssef Elouaer

2026

Critical

High

Medium

Low

Global Rank

#338

of 3,238 researchers

Vulns

13

Critical0

High6

Medium7

Low0

Affected Assets

13

13plugins

Avg CVSS

6.5

Average score of vulnerabilities

Researcher Submissions

13 records


2026-04-08 00:00	Online Scheduling and Appointment Booking System – Bookly <= 27.0 - Unauthenticated Price Manipulation via 'tips' Online Scheduling and Appointment Booki… <= 27.0	`CVE-2026-2519`	5.3 Medium	Youssef Elouaer	Yes
2026-04-07 00:00	WCAPF – WooCommerce Ajax Product Filter <= 4.2.3 - Unauthenticated Time-Based SQL Injection WCAPF <= 4.2.3	`CVE-2026-3396`	7.5 High	Youssef Elouaer	Yes
2026-04-03 13:05	Pie Register – User Registration, Profiles & Content Restriction <= 3.8.4.8 - Missing Authorization to Unauthenticated Registration Form Status Modification Pie Register <= 3.8.4.8	`CVE-2026-3571`	6.5 Medium	Youssef Elouaer	Yes
2026-03-23 16:11	Product Filter for WooCommerce by WBW <= 3.1.2 - Missing Authorization to Unauthenticated Filter Data Deletion via TRUNCATE TABLE Product Filter for WooCommerce by WBW <= 3.1.2	`CVE-2026-3138`	6.5 Medium	Youssef Elouaer	Yes
2026-03-14 13:14	NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.9 - Missing Authorization to Unauthenticated Arbitrary Form Entry Modification via nf_set_entry_update_id NEX-Forms <= 9.1.9	`CVE-2026-1947`	7.5 High	Youssef Elouaer	Yes
2026-03-14 13:11	Wicked Folders <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Folder Deletion Wicked Folders <= 4.1.0	`CVE-2026-1883`	4.3 Medium	Youssef Elouaer	Yes
2026-03-14 00:34	Thim Kit for Elementor <= 1.3.7 - Missing Authorization to Unauthenticated Private Course Disclosure Thim Kit for Elementor <= 1.3.7	`CVE-2026-1870`	5.3 Medium	Youssef Elouaer	Yes
2026-03-10 00:00	Name Directory <= 1.32.1 - Unauthenticated Stored Cross-Site Scripting via 'name_directory_name' Name Directory <= 1.32.1	`CVE-2026-3178`	7.2 High	Youssef Elouaer	Yes
2026-03-10 00:00	Responsive Contact Form Builder & Lead Generation Plugin <= 2.0.1 - Unauthenticated Stored Cross-Site Scripting Lead Form Builder & Contact Form <= 2.0.1	`CVE-2026-1454`	7.2 High	Youssef Elouaer	Yes
2026-03-03 21:42	Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.6.0 - Authenticated (Contributor+) Limited Options Update in save_gutena_forms_schema() Gutena Forms <= 1.6.0	`CVE-2026-1674`	6.5 Medium	Youssef Elouaer	Yes

Showing 1–10 of 13 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C