← All credits
Kai Aizen
20 vulnerability records and advisories credit this contributor.
CVE-2025-9776
CatFolders – Tame Your WordPress Media Library by Category <= 2.5.2 - Authenticated (Author+) SQL Injection via CSV Import
CVE-2025-11171
Chartify – WordPress Chart Plugin <= 3.5.9 - Missing Authentication for Administrative Function
CVE-2026-1313
MimeTypes Link Icons <= 3.2.20 - Authenticated (Contributor+) Server-Side Request Forgery via Crafted Links in Post Content
CVE-2026-1208
Friendly Functions for Welcart <= 1.2.5 - Cross-Site Request Forgery to Settings Update
CVE-2025-12030
ACF to REST API <= 3.3.4 - Insecure Direct Object Reference to Authenticated (Contributor+) ACF Field/Option Modification
CVE-2026-3594
Riaxe Product Customizer <= 2.4 - Unauthenticated Sensitive Information Disclosure via '/orders' REST API Endpoint
CVE-2025-11174
Document Library Lite <= 1.1.6 - Missing Authorization to Sensitive Information Exposure
CVE-2025-12163
Omnipress <= 1.6.5 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2026-32794
Apache Airflow Provider for Databricks: TLS Certificate Verification Disabled in Databricks Provider K8s Token Exchange
CVE-2026-30911
Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization