← All credits
Matan Bahar
9 vulnerability records and advisories credit this contributor.
CVE-2026-16750
Motors – Car Dealership & Classified Listings <= 1.4.120 - Missing Authorization to Unauthenticated Private/Draft/Password-Protected Listings Exposure
CVE-2026-12472
Kirki <= 6.0.11 - Missing Authorization to Unauthenticated Arbitrary Email Content Injection (Mail Relay / Phishing) via 'emailBody' and 'emailSubject' Parameters
CVE-2026-48945
Joomla Extension - getk2.org - Privileged RCE vulnerability in K2 extension for Joomla < 2.26
CVE-2026-48940
Joomla Extension - getk2.org - Stored-XSS in K2 extension for Joomla < 2.26
CVE-2026-48941
Joomla Extension - getk2.org - Unauthenticated folder delete in K2 extension for Joomla < 2.26
CVE-2026-48946
Joomla Extension - getk2.org - Privileged RCE vulnerability in K2 extension for Joomla < 2.26
CVE-2026-48944
Joomla Extension - getk2.org - Exposure of sensitive files via attachment copy in K2 extension for Joomla < 2.26
CVE-2026-48943
Joomla Extension - getk2.org - Authenticated user property mass-assignment in K2 extension for Joomla < 2.26
CVE-2026-48942
Joomla Extension - getk2.org - Stored-XSS in K2 extension for Joomla < 2.26