← All credits
Kazuma Matsumoto
26 vulnerability records and advisories credit this contributor.
CVE-2026-6711
Website LLMs.txt <= 8.2.6 - Reflected Cross-Site Scripting
CVE-2026-3506
WP-Chatbot for Messenger <= 4.9 - Missing Authorization to Unauthenticated Chatbot Configuration Takeover
CVE-2026-2993
AI Chatbot & Workflow Automation by AIWU <= 1.4.17 - Unauthenticated SQL Injection in getListForTbl()
CVE-2026-2987
Simple Ajax Chat <= 20260217 - Unauthenticated Stored Cross-Site Scripting via 'c'
CVE-2026-2879
GetGenie <= 4.3.2 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Post Overwrite/Deletion
CVE-2026-1920
Booktics <= 1.0.16 - Missing Authorization to Addon Plugin Installation
CVE-2026-1919
Booktics <= 1.0.16 - Missing Authorization to Get Items via REST API endpoints
CVE-2026-1797
Truebooker - Appointment Booking and Scheduler Plugin <= 1.1.4 - Sensitive Information Exposure via Views Files
CVE-2026-1302
Meta-box GalleryMeta <= 3.0.1 - Authenticated (Editor+) Stored Cross-Site Scripting via Image Caption
CVE-2026-1228
Timeline Block <= 1.3.3 - Insecure Direct Object Reference to Authenticated (Author+) Private Timeline Exposure via Shortcode Attribute